How to Configure SAML Authentication for Seculio

Item

Details

Pre-check

  • Prior configuration in Seculio is required.

  • You must create an account in Seculio using the same email address as TrustLogin.

  • For the latest setup instructions, please refer to the manual provided by Seculio.

Name ID

Email address

 

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

 

Request SP to configure

Provisioning

 

API-based Provisioning supported (account management available in TrustLogin)

 

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

 

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Seculio (SAML)".
    02.png

  3. Under "Identity Provider Information," note down the value of "Identity Provider URL," and download the certificate using the "Get Certificate" button.
    03.png

At this point, switch to configuring the Seculio side.
Do not click the "Register" button yet — open Seculio in a separate window.

Seculio Settings

  1. Open "Settings > SAML Settings" and click "Add Domain" under Domain Management.
    04.png

  2. Enter the domain name and click "Add."
    05.png

  3. Copy the displayed TXT record and add it to your domain's DNS settings.
    Once you have added it, click "Verify." Note that DNS record propagation can take up to 72 hours, so you can click "Close" and verify later if needed.

    Note: How to configure DNS records varies by domain registrar. Please refer to your domain registrar's help documentation.
    06.png

  4. Confirm that the domain status has changed to "Verified," and configure each item as follows.
    Finally, save by clicking the "Configure" button.
    Entity ID Copy and note down the value
    Assertion Consumer Service (ACS) URL Copy and note down the value
    Login URL The "Identity Provider URL" obtained from TrustLogin
    X.509 Certificate The contents of the "Certificate" obtained from TrustLogin
    Disable Password Login You can choose the setting for "Disable Password Login" according to your operational needs, but we recommend selecting "No" here, and changing it to "Yes" after you have verified SAML functionality and notified your users.
    Enable SAML SSO Enabled

    07.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "Entity ID" obtained from Seculio
    Service ACS URL The "Assertion Consumer Service (ACS) URL" obtained from Seculio
    Logout URL Not configured

    08.png

  2. Save by clicking the "Register" button.

 

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Seculio (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an administrator adds members

  1. Search for and click the "Seculio (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for Seculio

Item

Details

Pre-check

  • Prior configuration in Seculio is required.

  • You must create an account in Seculio using the same email address as TrustLogin.

  • For the latest setup instructions, please refer to the manual provided by Seculio.

Name ID

Email address

 

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

 

Request SP to configure

Provisioning

 

API-based Provisioning supported (account management available in TrustLogin)

 

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

 

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Seculio (SAML)".
    02.png

  3. Under "Identity Provider Information," note down the value of "Identity Provider URL," and download the certificate using the "Get Certificate" button.
    03.png

At this point, switch to configuring the Seculio side.
Do not click the "Register" button yet — open Seculio in a separate window.

Seculio Settings

  1. Open "Settings > SAML Settings" and click "Add Domain" under Domain Management.
    04.png

  2. Enter the domain name and click "Add."
    05.png

  3. Copy the displayed TXT record and add it to your domain's DNS settings.
    Once you have added it, click "Verify." Note that DNS record propagation can take up to 72 hours, so you can click "Close" and verify later if needed.

    Note: How to configure DNS records varies by domain registrar. Please refer to your domain registrar's help documentation.
    06.png

  4. Confirm that the domain status has changed to "Verified," and configure each item as follows.
    Finally, save by clicking the "Configure" button.
    Entity ID Copy and note down the value
    Assertion Consumer Service (ACS) URL Copy and note down the value
    Login URL The "Identity Provider URL" obtained from TrustLogin
    X.509 Certificate The contents of the "Certificate" obtained from TrustLogin
    Disable Password Login You can choose the setting for "Disable Password Login" according to your operational needs, but we recommend selecting "No" here, and changing it to "Yes" after you have verified SAML functionality and notified your users.
    Enable SAML SSO Enabled

    07.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "Entity ID" obtained from Seculio
    Service ACS URL The "Assertion Consumer Service (ACS) URL" obtained from Seculio
    Logout URL Not configured

    08.png

  2. Save by clicking the "Register" button.

 

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Seculio (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an administrator adds members

  1. Search for and click the "Seculio (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.