How to Configure SAML Authentication for learningBOX

Item

Details

Prerequisites

  • Prior configuration in learningBOX is required.

  • You need to create an account in learningBOX using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by learningBOX.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request the SP to configure settings

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported)

None (create accounts in each system)
Note: For instructions on how to configure provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop app

iOS - Standard browser (Safari)

iOS - TrustLogin mobile app in-app browser

iOS - Native app

Android - Standard browser (Chrome)

Android - TrustLogin mobile app in-app browser

Android - Native app

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Corporate App Registration" screen, search and select "learningBOX (SAML)."
    learningBOX04.png

  3. Note the "Identity Provider URL" and "Issuer / Entity ID" values under "Identity Provider Information," and download the certificate from the "Get Certificate" button.03.png

Now, switch to the configuration on the learningBOX side.
Do not click the "Register" button yet — open learningBOX in a separate window.

learningBOX Configuration

  1. Log in with a user who has access to the settings page, and open "Side Menu > System Settings > Site Customizer > Basic Settings."learningBOX14.png


  2. Open "External System Integration > Use SAML > Advanced Settings" and configure as follows.
    Automatically register account upon successful SAML authentication Off
    Include RequestedAuthnContext attribute On
    Issuer URL(IdP Entity ID) The "Issuer / Entity ID" you noted from TrustLogin
    HTTP-POST URL The "Identity Provider URL" you noted from TrustLogin
    X509Certificate Paste the contents of the "certificate" you noted from TrustLogin

    learningBOX03.png

  3. Scroll down the screen and click the "Save" button to save the settings.
    learningBOX08.png
  4. Open "SP (learningBOX) Configuration Information" and note the "learningBOX Entity ID" and "learningBOX ACS URL."
    Note: The "learningBOX Login URL" is the SP-Initiated URL. Note it if needed.
      You can also use SP-Initiated from the learningBOX login screen.
    learningBOX05.png

Now go back to the TrustLogin Admin Page.

TrustLogin Admin Page Configuration (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "learningBOX Entity ID" you noted from learningBOX
    ACS URL for the Service The "learningBOX ACS URL" you noted from learningBOX

    learningBOX06.png


  2. Click the "Register" button to save.

TrustLogin User Configuration

① When Users Add the App from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "App Registration" screen, select "learningBOX (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "learningBOX (SAML)" app.
  2. Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for learningBOX

Item

Details

Prerequisites

  • Prior configuration in learningBOX is required.

  • You need to create an account in learningBOX using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by learningBOX.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request the SP to configure settings

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported)

None (create accounts in each system)
Note: For instructions on how to configure provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop app

iOS - Standard browser (Safari)

iOS - TrustLogin mobile app in-app browser

iOS - Native app

Android - Standard browser (Chrome)

Android - TrustLogin mobile app in-app browser

Android - Native app

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Corporate App Registration" screen, search and select "learningBOX (SAML)."
    learningBOX04.png

  3. Note the "Identity Provider URL" and "Issuer / Entity ID" values under "Identity Provider Information," and download the certificate from the "Get Certificate" button.03.png

Now, switch to the configuration on the learningBOX side.
Do not click the "Register" button yet — open learningBOX in a separate window.

learningBOX Configuration

  1. Log in with a user who has access to the settings page, and open "Side Menu > System Settings > Site Customizer > Basic Settings."learningBOX14.png


  2. Open "External System Integration > Use SAML > Advanced Settings" and configure as follows.
    Automatically register account upon successful SAML authentication Off
    Include RequestedAuthnContext attribute On
    Issuer URL(IdP Entity ID) The "Issuer / Entity ID" you noted from TrustLogin
    HTTP-POST URL The "Identity Provider URL" you noted from TrustLogin
    X509Certificate Paste the contents of the "certificate" you noted from TrustLogin

    learningBOX03.png

  3. Scroll down the screen and click the "Save" button to save the settings.
    learningBOX08.png
  4. Open "SP (learningBOX) Configuration Information" and note the "learningBOX Entity ID" and "learningBOX ACS URL."
    Note: The "learningBOX Login URL" is the SP-Initiated URL. Note it if needed.
      You can also use SP-Initiated from the learningBOX login screen.
    learningBOX05.png

Now go back to the TrustLogin Admin Page.

TrustLogin Admin Page Configuration (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "learningBOX Entity ID" you noted from learningBOX
    ACS URL for the Service The "learningBOX ACS URL" you noted from learningBOX

    learningBOX06.png


  2. Click the "Register" button to save.

TrustLogin User Configuration

① When Users Add the App from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "App Registration" screen, select "learningBOX (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "learningBOX (SAML)" app.
  2. Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.