|
Item |
Details |
|
|---|---|---|
|
Prerequisites |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For instructions on how to configure custom attributes, see here |
||
|
SP-side Settings |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
Supports provisioning via API (account management possible in TrustLogin) |
|
|
Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts are created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation Status by Device |
〇 |
PC - Browser |
|
※ |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
※ |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
※ |
Android - Native App |
|
Note: The app is a Progressive Web App (PWA) installed from a web page.
TrustLogin Admin Page Configuration
-
Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
- On the "Register Corporate App" screen, search for and select "Remote (SAML)."
- Note down the value of "IdP URL" under "Identity Provider Information," and download the certificate using the "Get Certificate" button.
Now, switch to configuring the Remote side.
Do not click the "Register" button yet — open Remote in a separate window.
Remote Configuration
- Log in to Remote, open "Company settings>Authentication," and click the "Turn on Single Sign-on(SSO)" button.
- Configure the fields as follows, then enable SSO with the "Turn on Single Sign-on(SSO)" button.
URL Copy it using the copy button and note it down Audience Copy it using the copy button and note it down Company domain Enter the domain of the email address for the company where you want to enable SSO
Example: For test@xxx.com, enter xxx.com
Identity provider URL Enter the "IdP URL" noted from TrustLogin Upload certificate Upload the "Certificate" noted from TrustLogin
Return to the TrustLogin Admin Page again.
TrustLogin Admin Page Configuration (Continued)
- Configure "Service Provider Settings" as follows.
Entity ID Enter the "Audience" noted from Remote ACS URL for the Service Enter the "URL" noted from Remote
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a User Adds the App from My Page
- On "My Page," click the "Add App" button.
- On the "Register App" screen, select "Remote (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name," enter it, then click the "Register" button.
② When an Administrator Adds a Member
- In the "Admin Page > Apps" menu, search for and click the "Remote (SAML)" app.
- Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.