How to Configure SAML Authentication for Money Forward Admina

Item

Details

Prior Confirmation

  • Prior configuration in Money Forward Admina is required.

  • You need to create an account in Money Forward Admina using the same email address as TrustLogin.

  • When a Money Forward Admina administrator (Admin) logs in from the Money Forward Admina login screen, it will be a normal login rather than SAML authentication. SAML login is possible via IdP-Initiated SSO.

  • For the latest setup instructions, please check the manual provided by Money Forward Admina.

Name ID

Email address

Custom attribute Note: For instructions on how to configure a custom attribute, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based provisioning supported (account management possible in TrustLogin)

SAML JIT provisioning supported (account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Admina (SAML)".
    Admina.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".03.png

Now, switch to configuring Money Forward Admina.
Do not click the "Register" button yet — open Money Forward Admina in a separate window.

Money Forward Admina Settings

  1. Log in as an administrator (Admin), open "Settings > Security", and note down the value of "SAML entity ID". For "SAML metadata", select "File" from the pulldown menu and click "Upload".
    Admina02.png

  2. On the "Upload SAML metadata file" screen, upload the metadata you noted down from TrustLogin.
    Admina03.png

  3. After uploading, click the "OK" button to save the metadata.
    Admina04.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Enter the "SAML entity ID" you noted down from Money Forward Admina into the "Entity ID" field under "Service Provider Settings".
    Admina06.png

  2. Click the "Register" button to save.

Return to Money Forward Admina again.

Money Forward Admina Settings (Continued)

  1. Return to "Settings > Security" in Money Forward Admina and turn the "SAML" toggle ON. On the confirmation screen, click the "Enable" button.
    Note: Enabling SAML will switch all users in your organization to SAML login. We recommend notifying users before enabling this.
    Admina05.png


TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Admina (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Admina (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for Money Forward Admina

Item

Details

Prior Confirmation

  • Prior configuration in Money Forward Admina is required.

  • You need to create an account in Money Forward Admina using the same email address as TrustLogin.

  • When a Money Forward Admina administrator (Admin) logs in from the Money Forward Admina login screen, it will be a normal login rather than SAML authentication. SAML login is possible via IdP-Initiated SSO.

  • For the latest setup instructions, please check the manual provided by Money Forward Admina.

Name ID

Email address

Custom attribute Note: For instructions on how to configure a custom attribute, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based provisioning supported (account management possible in TrustLogin)

SAML JIT provisioning supported (account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Admina (SAML)".
    Admina.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".03.png

Now, switch to configuring Money Forward Admina.
Do not click the "Register" button yet — open Money Forward Admina in a separate window.

Money Forward Admina Settings

  1. Log in as an administrator (Admin), open "Settings > Security", and note down the value of "SAML entity ID". For "SAML metadata", select "File" from the pulldown menu and click "Upload".
    Admina02.png

  2. On the "Upload SAML metadata file" screen, upload the metadata you noted down from TrustLogin.
    Admina03.png

  3. After uploading, click the "OK" button to save the metadata.
    Admina04.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Enter the "SAML entity ID" you noted down from Money Forward Admina into the "Entity ID" field under "Service Provider Settings".
    Admina06.png

  2. Click the "Register" button to save.

Return to Money Forward Admina again.

Money Forward Admina Settings (Continued)

  1. Return to "Settings > Security" in Money Forward Admina and turn the "SAML" toggle ON. On the confirmation screen, click the "Enable" button.
    Note: Enabling SAML will switch all users in your organization to SAML login. We recommend notifying users before enabling this.
    Admina05.png


TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Admina (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Admina (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.