How to Configure SAML Authentication for Findy Team+

Item

Details

Pre-check

  • Advance configuration in Findy Team+ is required.

  • You must create an account in Findy Team+ using the same email address as TrustLogin.

  • For the latest setup instructions, please refer to the documentation provided by Findy Team+.

Name ID

〇

Email address

Custom attribute Note: For instructions on configuring custom attributes, see here

SP-side Configuration

〇

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

〇

None (accounts are created in each system)

Access Method

〇

SP-Initiated SSO

〇

IdP-Initiated SSO

Verified Operation Status by Device

〇

PC - Browser

ー

PC - Desktop App

〇

iOS - Standard Browser (Safari)

〇

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

〇

Android - Standard Browser (Chrome)

〇

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Enterprise App" screen and select "Findy Team+ (SAML)".
    Findy Team+01.png

  3. Note the values of "IdP URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png

Now switch to the Findy Team+ side configuration.
Do not click the "Register" button. Open Findy Team+ in a separate window.

Findy Team+ Settings

  1. Log in to Findy Team+ with an administrator account, select "Settings > Organization Settings > Authentication Management (Password/SSO) > SSO Authentication", and click the "Enable" button.
    Findy Team+02.png

  2. Configure "SSO Authentication Settings" as follows, and click the "Save" button to save the settings.
    Single Sign-On URL Use the copy button to note the value
    Audience URI Use the copy button to note the value
    IdP Single Sign-On URL Enter the "IdP URL" you noted from TrustLogin
    IdP Issuer Enter the "Issuer / Entity ID" you noted from TrustLogin
    X.509 Certificate Paste the contents of the "certificate" you obtained from TrustLogin

    Findy Team+03.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Audience URI" you noted from Findy Team+
    ACS URL for Service The "Single Sign-On URL" you noted from Findy Team+

    Findy Team+04.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Findy Team+ (SAML)" and
    click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, and click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "Findy Team+ (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for Findy Team+

Item

Details

Pre-check

  • Advance configuration in Findy Team+ is required.

  • You must create an account in Findy Team+ using the same email address as TrustLogin.

  • For the latest setup instructions, please refer to the documentation provided by Findy Team+.

Name ID

〇

Email address

Custom attribute Note: For instructions on configuring custom attributes, see here

SP-side Configuration

〇

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

〇

None (accounts are created in each system)

Access Method

〇

SP-Initiated SSO

〇

IdP-Initiated SSO

Verified Operation Status by Device

〇

PC - Browser

ー

PC - Desktop App

〇

iOS - Standard Browser (Safari)

〇

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

〇

Android - Standard Browser (Chrome)

〇

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Enterprise App" screen and select "Findy Team+ (SAML)".
    Findy Team+01.png

  3. Note the values of "IdP URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png

Now switch to the Findy Team+ side configuration.
Do not click the "Register" button. Open Findy Team+ in a separate window.

Findy Team+ Settings

  1. Log in to Findy Team+ with an administrator account, select "Settings > Organization Settings > Authentication Management (Password/SSO) > SSO Authentication", and click the "Enable" button.
    Findy Team+02.png

  2. Configure "SSO Authentication Settings" as follows, and click the "Save" button to save the settings.
    Single Sign-On URL Use the copy button to note the value
    Audience URI Use the copy button to note the value
    IdP Single Sign-On URL Enter the "IdP URL" you noted from TrustLogin
    IdP Issuer Enter the "Issuer / Entity ID" you noted from TrustLogin
    X.509 Certificate Paste the contents of the "certificate" you obtained from TrustLogin

    Findy Team+03.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Audience URI" you noted from Findy Team+
    ACS URL for Service The "Single Sign-On URL" you noted from Findy Team+

    Findy Team+04.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Findy Team+ (SAML)" and
    click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, and click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "Findy Team+ (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.