TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right.
   
   
   
2. Search in the "Register Enterprise App" screen and select "Universal Kinjiro (SAML)".
   
   
   
3. Note down the values of "Identity Provider URL" and "Issuer / Entity ID" from "Identity Provider Information", and download the certificate using the "Get Certificate" button.
   

Now, proceed to the Universal Kinjiro settings.
Do not click the "Register" button yet; open Universal Kinjiro in a separate window.

Universal Kinjiro Settings

1. Log in to Universal Kinjiro and open "Master Management > System Management Menu > SAML Settings".
   
   
   
2. Configure each item as follows, then save the settings using the "Save" button.
   

   Single Sign-On	"Enable"
   Redirect URL	The "Identity Provider URL" obtained from TrustLogin
   Client ID	Set any string of your choice Note this down, as it will be entered on the TrustLogin side
   IdP Entity ID	The "Issuer / Entity ID" obtained from TrustLogin
   IdP Certificate	The contents of the "Certificate" obtained from TrustLogin

   
   

Return to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (continued)

1. Configure "Service Provider Settings" as follows.
   

   Login URL	Enter your Universal Kinjiro customer domain name in the blank portion
   Entity ID	The "Client ID" configured in Universal Kinjiro
   ACS URL for the Service	Enter your Universal Kinjiro customer domain name in the blank portion

   
   
   
   
2. Save using the "Save" button.

TrustLogin User Settings

① When a user adds the app from My Page

1. On "My Page", click the "Add App" button.
2. In the "Register App" screen, select "Universal Kinjiro (SAML)" and click the "Next" button in the upper right.
3. If you wish to change the "Display Name", enter it and click the "Save" button.

② When an administrator adds members

1. In the "Admin Page > App" menu, search for and click the "Universal Kinjiro (SAML)" app.
2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

Account Linking on First Login

The first time you log in via SAML, you need to perform an operation to link your account with Universal Kinjiro.

1. Access the Universal Kinjiro login screen and click "SAML Authentication".
   If you are not already logged in to TrustLogin, complete TrustLogin authentication.
   
   
   
2. Close the displayed message, then log in using your "Employee Code" and "Password".
   
   
   
   
3. Account linking is now complete, and SAML authentication will be available for subsequent logins.