TRACERY SAML JIT Setup Guide

GMOトラスト・ログインチーム
  • Updated

Item

Details

Pre-check

  • Prior configuration in TRACERY is required.

  • SAML JIT in TRACERY only supports creating new users. Since changes made in TrustLogin are not synced afterward, if you want to change a user's username, the administrator must manually update the information in TRACERY.
  • In an emergency after enabling SSO, only administrators and owners can log in to TRACERY using password authentication via the emergency login URL below.　
    https://{workspace subdomain}.tracery.jp/login/emergency/　

  • Please refer to the manual provided by TRACERY for the latest configuration steps.

Name ID

〇

Email address

Custom attribute　Note: For instructions on how to configure custom attributes, see here

SP Configuration

〇

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)
〇

SAML JITProvisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

〇

PC - Browser

ー

PC - Desktop App

〇

iOS - Standard Browser (Safari)

ー

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

〇

Android - Standard Browser (Chrome)

ー

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App


Prerequisites

When a user is created via SAML JIT, the "username" is synced to TRACERY. You need to configure a custom attribute in TrustLogin member information to link it to the TRACERY "username".

Note: The attribute name can be anything you choose.

Note: The attribute value must be set using single-byte alphanumeric characters.


[TrustLogin Custom Attribute Configuration Example]

TRACERY07.png

Please refer to the following pages for instructions on how to configure custom attributes.

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "TRACERY (SAML)".
    TRACERY04.png

  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".03.png

  4. Configure "Service Provider Settings" and "SAML Attribute Settings" as follows, and save by clicking the "Register" button.
    Login URL Enter the domain of the TRACERY workspace for which you want to configure SSO in the blank field
    Custom attribute Select the attribute name you configured from the dropdown
    (e.g., fullname)

    TRACERY05.png

Now, switch to configuring TRACERY.


TRACERY Settings

  1. Log in to TRACERY and select "Workspace Settings" from the gear icon in the upper right.
    TRACERY.png

  2. Select "SAML Single Sign-On Settings". Upload the metadata noted down from TrustLogin under "Metadata File", and click "Enable".
    TRACERY03.png

  3. After enabling single sign-on, you will be able to select the "Authentication Mode". Select it and update by clicking the "Update" button.
    Note: Selecting "Enable SAML SSO only" will disable password login. We recommend selecting this only after confirming that SAML authentication succeeds.
    TRACERY06.png

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "TRACERY (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "TRACERY (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

Was this article helpful?

Related articles

  1. ホーム
  2. SAML JIT App Configuration
  3. TRACERY SAML JIT Setup Guide

TRACERY SAML JIT Setup Guide

GMOトラスト・ログインチーム
  • Updated

Item

Details

Pre-check

  • Prior configuration in TRACERY is required.

  • SAML JIT in TRACERY only supports creating new users. Since changes made in TrustLogin are not synced afterward, if you want to change a user's username, the administrator must manually update the information in TRACERY.
  • In an emergency after enabling SSO, only administrators and owners can log in to TRACERY using password authentication via the emergency login URL below.　
    https://{workspace subdomain}.tracery.jp/login/emergency/　

  • Please refer to the manual provided by TRACERY for the latest configuration steps.

Name ID

〇

Email address

Custom attribute　Note: For instructions on how to configure custom attributes, see here

SP Configuration

〇

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)
〇

SAML JITProvisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

〇

PC - Browser

ー

PC - Desktop App

〇

iOS - Standard Browser (Safari)

ー

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

〇

Android - Standard Browser (Chrome)

ー

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App


Prerequisites

When a user is created via SAML JIT, the "username" is synced to TRACERY. You need to configure a custom attribute in TrustLogin member information to link it to the TRACERY "username".

Note: The attribute name can be anything you choose.

Note: The attribute value must be set using single-byte alphanumeric characters.


[TrustLogin Custom Attribute Configuration Example]

TRACERY07.png

Please refer to the following pages for instructions on how to configure custom attributes.

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "TRACERY (SAML)".
    TRACERY04.png

  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".03.png

  4. Configure "Service Provider Settings" and "SAML Attribute Settings" as follows, and save by clicking the "Register" button.
    Login URL Enter the domain of the TRACERY workspace for which you want to configure SSO in the blank field
    Custom attribute Select the attribute name you configured from the dropdown
    (e.g., fullname)

    TRACERY05.png

Now, switch to configuring TRACERY.


TRACERY Settings

  1. Log in to TRACERY and select "Workspace Settings" from the gear icon in the upper right.
    TRACERY.png

  2. Select "SAML Single Sign-On Settings". Upload the metadata noted down from TrustLogin under "Metadata File", and click "Enable".
    TRACERY03.png

  3. After enabling single sign-on, you will be able to select the "Authentication Mode". Select it and update by clicking the "Update" button.
    Note: Selecting "Enable SAML SSO only" will disable password login. We recommend selecting this only after confirming that SAML authentication succeeds.
    TRACERY06.png

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "TRACERY (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "TRACERY (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

Related articles