TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. Search on the "Register Company App" screen and select "Zscaler Internet Access (SAML)".
   
   
   
3. Note down the "Identity Provider URL" under "Identity Provider Information", and download the certificate from "Get Certificate". Change the file extension of the downloaded certificate to ".pem".
   

Now, switch to configuring the Zscaler side.
Do not click the "Register" button yet — open the Zscaler Internet Access service portal in a separate tab.

Zscaler Internet Access Settings

1. Log in with an administrator account and open "Administration > Authentication > Authorization" from the left menu.
   
   
   
2. When the "Authorization" screen appears, configure each item as follows and save.
   

   User Repository Type	Select "Internal DB"
   Authentication Frequency	Select any value
   Authentication Type	Select "SAML"
   Temporary Authentication	Select "Disabled"

   
   
   
   
3. Select the "Administration > Identity Providers" tab and click "Add IdP".
   
   
   
4. When the Add IdP screen appears, configure each item as follows and click the "Save" button.
   

   Name	Enter "TrustLogin"
   SAML Portal URL	The Identity Provider URL you noted from TrustLogin
   Login Name Attribute	Enter "NameID"
   Organization-Specific Entity ID	Select "Enabled"
   IdP SAML Certificate	Upload the certificate downloaded from TrustLogin
   Vendor	Select "Others"
   Sign SAML Request	OFF
   SP Metadata	Download from "Download Metadata"
   Enable SAML Auto-Provisioning	OFF

   
   
   
   
   
5. Click "Enable".
   
   
   
6. Open the metadata file obtained from Zscaler in a text editor, and add ":443" after "[domain].net" in the Location value "https://login.[domain].net/sfc_sso", then overwrite and save.
   (It is easier to find by searching for "Location".)
   After editing, save it as an XML file.
   
   
   

TrustLogin Admin Page Settings (Continued)

Return to the TrustLogin Admin Page again.

1. From "Service Provider Settings" > "Select Metadata", upload the metadata that you downloaded from Zscaler and for which you edited the Location value.
   
   
   
2. Click the "Register" button to save.
   
   

TrustLogin User Settings

① When a user adds the app from My Page

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select "Zscaler Internet Access (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an administrator adds members

1. Search for and click the "Zscaler Internet Access (SAML)" app in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.