Akamai Enterprise Application Access SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Akamai Enterprise Application Access is required.

  • Please refer to the manual provided by Akamai Enterprise Application Access for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

Note: Login itself is possible via the mobile app's in-app browser, but the browser is not within the supported operating environment

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Akamai Enterprise Application Access (SAML)".
    02.png

  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".
    03.png

Now, switch to configuring Akamai Enterprise Application Access.
Do not click the "Register" button yet — open Akamai Control Center in a separate window.

Akamai Enterprise Application Access Settings

  1. Open the hamburger menu in the upper left > "Enterprise Center".
    04.png

  2. Open "Application Access > Identity & Users > Identity Providers" and click the "+" button in the upper right.
    05.png

  3. Configure each item as follows, then click the "Continue" button to proceed.
    Name Any name you like
    Provider Type Select "Third Party SAML"

    06.png

  4. Select "Use Akamai domain" under "General > Identity Intercept" and set any subdomain you like. Make a note of the subdomain you set, as you will use it later.
    07.png

    Note: When accessing via the SP-Initiated method, the following URL becomes the login URL.
    https://[configured subdomain].login.go.akamai-access.com/

  5. Click the "Authentication" menu on the left, configure each item as follows, and
    click the "Save and Deploy" button.
    URL [subdomain configured in step 4].login.go.akamai-access.com
    Logout URL https://portal.trustlogin.com/
    Upload IDP metadata file The "metadata" obtained from TrustLogin

    08.png

  6. Click the "Deploy" button.
    09.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. In "Service Provider Settings", enter the subdomain you configured in Akamai Enterprise Application Access into the "Entity ID" and "ACS URL to Service" fields.
    10.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Akamai Enterprise Application Access (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Akamai Enterprise Application Access (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Akamai Enterprise Application Access SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Akamai Enterprise Application Access is required.

  • Please refer to the manual provided by Akamai Enterprise Application Access for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

Note: Login itself is possible via the mobile app's in-app browser, but the browser is not within the supported operating environment

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Akamai Enterprise Application Access (SAML)".
    02.png

  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".
    03.png

Now, switch to configuring Akamai Enterprise Application Access.
Do not click the "Register" button yet — open Akamai Control Center in a separate window.

Akamai Enterprise Application Access Settings

  1. Open the hamburger menu in the upper left > "Enterprise Center".
    04.png

  2. Open "Application Access > Identity & Users > Identity Providers" and click the "+" button in the upper right.
    05.png

  3. Configure each item as follows, then click the "Continue" button to proceed.
    Name Any name you like
    Provider Type Select "Third Party SAML"

    06.png

  4. Select "Use Akamai domain" under "General > Identity Intercept" and set any subdomain you like. Make a note of the subdomain you set, as you will use it later.
    07.png

    Note: When accessing via the SP-Initiated method, the following URL becomes the login URL.
    https://[configured subdomain].login.go.akamai-access.com/

  5. Click the "Authentication" menu on the left, configure each item as follows, and
    click the "Save and Deploy" button.
    URL [subdomain configured in step 4].login.go.akamai-access.com
    Logout URL https://portal.trustlogin.com/
    Upload IDP metadata file The "metadata" obtained from TrustLogin

    08.png

  6. Click the "Deploy" button.
    09.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. In "Service Provider Settings", enter the subdomain you configured in Akamai Enterprise Application Access into the "Entity ID" and "ACS URL to Service" fields.
    10.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Akamai Enterprise Application Access (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Akamai Enterprise Application Access (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.