Item	Content
Prerequisites	Prior configuration is required in WowTalk. The WowTalk member's ID and the TrustLogin email address must match. For the latest configuration procedure, please refer to the manual provided by WowTalk.
Name ID	〇	Email address
		Custom attribute　Note: For how to configure custom attributes, see here
SP-side configuration	〇	Configured by the administrator
		Request configuration from the SP
Provisioning		Supports provisioning via API (account management possible in TrustLogin)
		Supports SAML JIT provisioning(account management possible in TrustLogin; user deletion not supported)
	〇	None (accounts are created in each system)
Access method	〇	SP-Initiated SSO
	ー	IdP-Initiated SSO
Verified Operation Status by Device	〇	PC - Browser
	〇	PC - Desktop App (※)
	〇	iOS - Standard Browser (Safari)
	〇	iOS - TrustLogin Mobile App Internal Browser
	〇	iOS - Native App
	〇	Android - Standard Browser (Chrome)
	〇	Android - TrustLogin Mobile App Internal Browser
	〇	Android - Native App
SAML Authentication Scope	ー	Enabled for everyone (SAML authentication only)
	〇	Other: Enabled for everyone (both SAML authentication and password authentication are possible)
Notes	(※) If you are using client authentication, SSO is not possible on PC - Desktop App (Windows legacy PC version / Mac β version).

Table of Contents: Configuring the TrustLogin Admin Page Configuring WowTalk Configuring TrustLogin Users How to Log In

Configuring the TrustLogin Admin Page

1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. Search on the "Register Corporate App" screen and select "WowTalk (SAML)".
   
   
   
3. Note the "Identity Provider URL" value under "Identity Provider Information," then download the certificate from the "Get Certificate" button.
   
   
4. Save by clicking the "Register" button.
   
   
5. [Converting the certificate format]
   Convert the extension of the downloaded certificate to ".cer".

Configuring WowTalk

1. Log in to the WowTalk admin site and open "External Service Integration > SSO Integration Settings".
   Turn on "Use SAML Authentication," configure the settings as follows, and save by clicking "Set".
   Note: If "SSO Integration Settings" is not displayed, please contact Kingsoft Corporation.
   

   Identity Provider	Select "GMO Trust Login"
   Identity Provider's SSO Endpoint URL	The "Identity Provider URL" you noted from TrustLogin
   Identity Provider's Certificate	Upload the certificate (converted to .cer) that you obtained from TrustLogin

   
   
   
   
2. To perform SAML authentication, the member's ID and the TrustLogin email address must match.
   Set the TrustLogin email address as the "ID" in the member information.
   

Configuring TrustLogin Users

① When a user adds the app from My Page

Note: The administrator must configure the SAML app in advance.

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select "WowTalk (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an administrator adds members

1. In the "Admin Page > Apps" menu, search for and click the "WowTalk (SAML)" app.
2. Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.

How to Log In

① Logging in with "WowTalk (SAML)" (Browser)

Running "WowTalk (SAML)" from My Page or the browser extension takes you to the WowTalk external integration authentication login screen. After entering your "Corporate ID" and "ID," click "Login" to complete the login.

② Using the helper app (PC browser only)

A helper app that can automatically enter your "Corporate ID" and "ID" is also available.
Search for it on the app search screen and register "[SAML Helper] WowTalk" to use it.
Note: The helper app can only be used in a PC browser.

Logging in with the smartphone native app

Enter only your "Corporate ID" and "Personal ID," then click the "External Integration Authentication Account Login" button. You will be taken to the TrustLogin authentication screen, and once authenticated, login to WowTalk is complete.

Logging in with the desktop app (Windows new PC version)

1. Click "Log in with External Integration Authentication Account".
   
   
   
2. Enter your "Corporate ID" and "User ID," check "Use external browser for authentication," and log in. You will be taken to the TrustLogin authentication screen, and once authenticated, login to WowTalk is complete.
   

Logging in with the desktop app (Windows legacy PC version)

1. Click "External Integration Authentication Account Login".
   
   
   
2. Enter your "Corporate ID" and "User ID" and log in. You will be taken to the TrustLogin authentication screen, and once authenticated, login to WowTalk is complete.
   
   
   

Logging in with the desktop app (Mac β version)

1. Click "Log in with Active Directory Account".
   
   
   
2. Enter your "Corporate ID" and "User ID" and log in. You will be taken to the TrustLogin authentication screen, and once authenticated, login to WowTalk is complete.