|
Item |
Details |
|
|---|---|---|
|
Prior Confirmation |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For instructions on how to configure a custom attribute, click here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management possible in TrustLogin) |
|
|
SAML JIT Provisioning supported (account management possible in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
TrustLogin Admin Page Configuration
- Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "SAP BTP (SAML)".
- Download the metadata from the "Download Metadata" button under "Identity Provider Information".
Now, switch over to configuring SAP BTP.
Do not click the "Register" button yet — open the SAP BTP Cockpit in a separate window.
SAP BTP Configuration
- Log in to the SAP BTP Cockpit with an administrator account, and click the subaccount you want to configure.
- Open "Security" > "Trust Configuration", and click "New SAML Trust Configuration".
- Configure each item, and save the settings by clicking "Save".
Metadata Upload the "Metadata" obtained from TrustLogin via "Upload" Name Any name of your choice (e.g., TrustLogin)
Status Select "Active" Create Shadow User During Logon OFF
- To enable the SAML configuration for user logon, click the edit (pencil) icon on the SAML configuration you created, check the box, and save.
- Download the SP metadata from "Download SAML Metadata".
- Go to "Security" > "Users", and click "Create".
- Enter the "User Name" and "E-Mail" of the user to enable for SSO, and for "Identity Provider", select the IdP configuration you set up. Complete user creation by clicking the "Create" button.
Now return to the TrustLogin Admin Page.
TrustLogin Admin Page Configuration (Continued)
- In "Service Provider Settings", upload the metadata obtained from SAP BTP to "Metadata".
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a User Adds the App via My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "SAP BTP (SAML)", and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it, then click the "Register" button.
② When an Administrator Adds a Member
- Search for and click the "SAP BTP (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.