How to Configure SAML Authentication for PartnerSuccess

Item

Details

Prior Confirmation

  • Prior configuration in PartnerSuccess is required.

  • You must create an account in PartnerSuccess using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by PartnerSuccess.

Name ID

Email address

Custom attribute Note: For instructions on how to configure a custom attribute, click here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Provisioning via API supported (account management possible in TrustLogin)

SAML JIT provisioning supported(account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "PartnerSuccess (SAML)".
    02.png

  3. Note down the values of "Identity Provider URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

Now, switch over to configuring PartnerSuccess.
Do not click the "Register" button yet — open PartnerSuccess in a separate window.

PartnerSuccess Configuration

  1. From the administrator settings screen, select "SSO Settings" and turn ON "Apply SSO Settings".
    04.png

  2. Configure each item as follows, and finally save by clicking the "Save This Content" button.
    (IdP Information) Single Sign-On URL The "Identity Provider URL" obtained from TrustLogin
    (IdP Information) Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    (IdP Information) Certificate The contents of the "Certificate" obtained from TrustLogin
    (SP Information) ACS URL Copy and make a note of it
    (SP Information) Entity ID Copy and make a note of it
    (SP Information) Single Logout URL Copy and make a note of it
    Disable login methods other than SSO We recommend leaving this OFF during initial setup
    If you want to restrict the login method to SAML SSO, switch this ON only after you have completed testing and notified your users.

    05.png

Now return to the TrustLogin admin page.

TrustLogin Admin Page Configuration (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Entity ID" obtained from PartnerSuccess
    ACS URL to Service The "ACS URL" obtained from PartnerSuccess
    Logout URL The "Single Logout URL" obtained from PartnerSuccess (Note:)
    Note: Single Logout is planned to be added in the future, but is not currently implemented and does not work

    06.png

  2. Save by clicking the "Register" button.

TrustLogin User Configuration

① When a User Adds the App via My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "PartnerSuccess (SAML)", and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

② When an Administrator Adds a Member

  1. Search for and click the "PartnerSuccess (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for PartnerSuccess

Item

Details

Prior Confirmation

  • Prior configuration in PartnerSuccess is required.

  • You must create an account in PartnerSuccess using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by PartnerSuccess.

Name ID

Email address

Custom attribute Note: For instructions on how to configure a custom attribute, click here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Provisioning via API supported (account management possible in TrustLogin)

SAML JIT provisioning supported(account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "PartnerSuccess (SAML)".
    02.png

  3. Note down the values of "Identity Provider URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

Now, switch over to configuring PartnerSuccess.
Do not click the "Register" button yet — open PartnerSuccess in a separate window.

PartnerSuccess Configuration

  1. From the administrator settings screen, select "SSO Settings" and turn ON "Apply SSO Settings".
    04.png

  2. Configure each item as follows, and finally save by clicking the "Save This Content" button.
    (IdP Information) Single Sign-On URL The "Identity Provider URL" obtained from TrustLogin
    (IdP Information) Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    (IdP Information) Certificate The contents of the "Certificate" obtained from TrustLogin
    (SP Information) ACS URL Copy and make a note of it
    (SP Information) Entity ID Copy and make a note of it
    (SP Information) Single Logout URL Copy and make a note of it
    Disable login methods other than SSO We recommend leaving this OFF during initial setup
    If you want to restrict the login method to SAML SSO, switch this ON only after you have completed testing and notified your users.

    05.png

Now return to the TrustLogin admin page.

TrustLogin Admin Page Configuration (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Entity ID" obtained from PartnerSuccess
    ACS URL to Service The "ACS URL" obtained from PartnerSuccess
    Logout URL The "Single Logout URL" obtained from PartnerSuccess (Note:)
    Note: Single Logout is planned to be added in the future, but is not currently implemented and does not work

    06.png

  2. Save by clicking the "Register" button.

TrustLogin User Configuration

① When a User Adds the App via My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "PartnerSuccess (SAML)", and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

② When an Administrator Adds a Member

  1. Search for and click the "PartnerSuccess (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.