How to Configure SAML Authentication for ThinkOwl

Item

Details

Pre-check

  • Advance configuration in ThinkOwl is required.

  • The ThinkOwl username and the TrustLogin email address for the account must match.

  • For the latest setup instructions, please refer to the documentation provided by ThinkOwl.

Name ID

Email address

Custom attribute Note: For instructions on configuring custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Enterprise App" screen and select "ThinkOwl (SAML)".
    ThinkOwl.png

  3. Note down the value of "Identity Provider URL" under "Identity Provider Information".ThinkOwl06.png

Now switch to the ThinkOwl-side configuration.
Do not click the "Register" button yet; please open ThinkOwl in a separate window.

ThinkOwl Settings

  1. Log in to ThinkOwl as an account administrator, and select "Security" from the administrator tab.ThinkOwl02.png

  2. From "Identity provider", click "SAML v2.0".
    ThinkOwl03.png

  3. Configure the settings items as follows, and save the settings with "Save".
    Name Any name of your choice (in this example, trustlogin)
    Note: Since you will enter this value into TrustLogin later, note down the value you entered
    Name

    Any name of your choice

    Note: The name you set here will be displayed as the SSO login button when logging in to ThinkOwl.

    SSO Service URL The "Identity Provider URL" you noted down from TrustLogin

    ThinkOwl04.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Login URL

    The ThinkOwl login URL

    Example: https://[tenant name].thinkowl.jp https://[tenant name].thinkowl.com

    Entity ID

    Red box: The ThinkOwl login URL

    Blue box: Tenant name

    ACS URL for Service

    Red box: The ThinkOwl login URL

    Blue box: Tenant name

    Green box: The "Name" you set in ThinkOwl (in this example, trustlogin)


    ThinkOwl05.png

  2. Save the settings using the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "ThinkOwl (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, and click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "ThinkOwl (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for ThinkOwl

Item

Details

Pre-check

  • Advance configuration in ThinkOwl is required.

  • The ThinkOwl username and the TrustLogin email address for the account must match.

  • For the latest setup instructions, please refer to the documentation provided by ThinkOwl.

Name ID

Email address

Custom attribute Note: For instructions on configuring custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Enterprise App" screen and select "ThinkOwl (SAML)".
    ThinkOwl.png

  3. Note down the value of "Identity Provider URL" under "Identity Provider Information".ThinkOwl06.png

Now switch to the ThinkOwl-side configuration.
Do not click the "Register" button yet; please open ThinkOwl in a separate window.

ThinkOwl Settings

  1. Log in to ThinkOwl as an account administrator, and select "Security" from the administrator tab.ThinkOwl02.png

  2. From "Identity provider", click "SAML v2.0".
    ThinkOwl03.png

  3. Configure the settings items as follows, and save the settings with "Save".
    Name Any name of your choice (in this example, trustlogin)
    Note: Since you will enter this value into TrustLogin later, note down the value you entered
    Name

    Any name of your choice

    Note: The name you set here will be displayed as the SSO login button when logging in to ThinkOwl.

    SSO Service URL The "Identity Provider URL" you noted down from TrustLogin

    ThinkOwl04.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Login URL

    The ThinkOwl login URL

    Example: https://[tenant name].thinkowl.jp https://[tenant name].thinkowl.com

    Entity ID

    Red box: The ThinkOwl login URL

    Blue box: Tenant name

    ACS URL for Service

    Red box: The ThinkOwl login URL

    Blue box: Tenant name

    Green box: The "Name" you set in ThinkOwl (in this example, trustlogin)


    ThinkOwl05.png

  2. Save the settings using the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "ThinkOwl (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, and click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "ThinkOwl (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.