How to Configure SAML Authentication for Findy Team+

Item

Details

Pre-check

  • Advance configuration in Findy Team+ is required.

  • You must create an account in Findy Team+ using the same email address as TrustLogin.

  • For the latest setup instructions, please refer to the documentation provided by Findy Team+.

Name ID

Email address

Custom attribute Note: For instructions on configuring custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Enterprise App" screen and select "Findy Team+ (SAML)".
    Findy Team+01.png

  3. Note the values of "IdP URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png

Now switch to the Findy Team+ side configuration.
Do not click the "Register" button. Open Findy Team+ in a separate window.

Findy Team+ Settings

  1. Log in to Findy Team+ with an administrator account, select "Settings > Organization Settings > Authentication Management (Password/SSO) > SSO Authentication", and click the "Enable" button.
    Findy Team+02.png

  2. Configure "SSO Authentication Settings" as follows, and click the "Save" button to save the settings.
    Single Sign-On URL Use the copy button to note the value
    Audience URI Use the copy button to note the value
    IdP Single Sign-On URL Enter the "IdP URL" you noted from TrustLogin
    IdP Issuer Enter the "Issuer / Entity ID" you noted from TrustLogin
    X.509 Certificate Paste the contents of the "certificate" you obtained from TrustLogin

    Findy Team+03.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Audience URI" you noted from Findy Team+
    ACS URL for Service The "Single Sign-On URL" you noted from Findy Team+

    Findy Team+04.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Findy Team+ (SAML)" and
    click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, and click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "Findy Team+ (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for Findy Team+

Item

Details

Pre-check

  • Advance configuration in Findy Team+ is required.

  • You must create an account in Findy Team+ using the same email address as TrustLogin.

  • For the latest setup instructions, please refer to the documentation provided by Findy Team+.

Name ID

Email address

Custom attribute Note: For instructions on configuring custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Enterprise App" screen and select "Findy Team+ (SAML)".
    Findy Team+01.png

  3. Note the values of "IdP URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png

Now switch to the Findy Team+ side configuration.
Do not click the "Register" button. Open Findy Team+ in a separate window.

Findy Team+ Settings

  1. Log in to Findy Team+ with an administrator account, select "Settings > Organization Settings > Authentication Management (Password/SSO) > SSO Authentication", and click the "Enable" button.
    Findy Team+02.png

  2. Configure "SSO Authentication Settings" as follows, and click the "Save" button to save the settings.
    Single Sign-On URL Use the copy button to note the value
    Audience URI Use the copy button to note the value
    IdP Single Sign-On URL Enter the "IdP URL" you noted from TrustLogin
    IdP Issuer Enter the "Issuer / Entity ID" you noted from TrustLogin
    X.509 Certificate Paste the contents of the "certificate" you obtained from TrustLogin

    Findy Team+03.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Audience URI" you noted from Findy Team+
    ACS URL for Service The "Single Sign-On URL" you noted from Findy Team+

    Findy Team+04.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Findy Team+ (SAML)" and
    click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, and click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "Findy Team+ (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.