Note: Currently under verification

TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. Search on the "Register Company App" screen and select "Amazon Cognito (SAML)".
   
   
   
3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".
   

Now, switch to configuring Amazon Cognito.
Do not click the "Register" button yet — open the Amazon Cognito console in a separate tab.

Amazon Cognito Settings

1. 【Create a User Pool】
   Note: If you have already created one, proceed to step 3.
   Open the Amazon Cognito console and create a user pool. For detailed steps on creating a user pool, please refer to Amazon's manual.
   
   
   
2. Configure each item as follows, then click "Create User Directory".
   

   Application Type	Select the application type
   Name your application	Any application name you like
   Sign-in identifier options	Email address
   Required attributes for sign-up	Add "email", "family_name", and "given_name" from the dropdown
   Return URL (optional)	Set the return URL

   
   
   
   
3. 【Disable Self-Registration】
   Click the name of the user pool you created from the user pool list, then open the edit screen for "Sign-up" > "Self-service sign-up".
   
   
   
   
   
4. Uncheck "Enable self-registration" and save your changes.
   
   
   
5. 【External Provider Settings】
   Open "Social and external providers" and click "Add identity provider".
   
   
   
6. Configure each item as follows, then click "Add identity provider".
   

   Federated sign-in options	Select SAML
   Provider name	Set any name you like Note: This becomes the button name for the SSO login button on the login page.
   IdP-initiated SAML sign-in	Select "Accept SAML assertions initiated by SP and IdP"
   Metadata document	Select "Upload metadata document", then select and upload the metadata downloaded from TrustLogin
   Map attributes between SAML provider and user pool	Enter "email", "family_name", and "given_name" in the "SAML attribute" field on the right, corresponding to each user pool attribute on the left

   
   
   
   
7. 【Add SAML SSO Button to Login Page】
   Open "App clients" and open the link for the app client name.
   
   
   
8. Open the "Login pages" tab, then open "Edit" under "Managed login pages configuration".
   
   
   
9. 【Identity Provider Settings】
   From the "Select identity provider" dropdown under "Identity providers", check only the identity provider you configured.
   Save your settings by clicking the "Save changes" button in the lower right.
   
   
   
   
   
10. 【Obtain the Information to Configure in TrustLogin】
    
    ① User Pool ID
    Return to the user pool's top page and note down the value of "User pool ID".
    
    
    ② Domain
    Open "Domain" and note down the value of "Domain" (Cognito domain or custom domain).
    
    
    ③ Client ID and ④ Callback URL
    Click the target app client name under "App clients" to open the details screen, and note down the values of "Client ID" and "Login pages > Allowed callback URLs".
    

Now return to the TrustLogin settings again.

TrustLogin Admin Page Settings (Continued)

1. Configure "Service Provider Settings" as follows.
   

   Login URL	Leave blank
   Redirect URL after successful SP authentication	Using the information obtained from Amazon Cognito and the provider name configured in step 6, generate the value by replacing the red-highlighted placeholders below. identity_provider={Provider Name}&client_id={③Client ID}&redirect_uri={④Callback URL}&response_type=code&scope=openid+email+phone
   Entity ID	"① User Pool ID" obtained from Amazon Cognito
   ACS URL to Service	"② Domain" obtained from Amazon Cognito

   
   
   
   
2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

Note: The SAML app must be configured by an administrator in advance.

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select "Amazon Cognito (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

1. Search for and click the "Amazon Cognito (SAML)" app in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

About User Information

• On the user page, the verification status of users who logged in via single sign-on is displayed as "External Provider". Even with the same email address, such users are treated as distinct from users created by an administrator. If IdP-Initiated login is configured, password login will no longer be available.