TrustLogin Admin Page Configuration

1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. On the "Corporate App Registration" screen, search and select "MA-EYES (SAML)."
   
   
   
3. From "Identity Provider Information," click the "Download Metadata" button to download the metadata.
   
   

Now, switch to the configuration on the MA-EYES side.
Do not click the "Register" button yet — open MA-EYES in a separate window.

MA-EYES Configuration

1. From the left menu, open "System Administration > SAML Authentication Settings."
   
   
   
2. Click the "Edit" button.
   
   
   
3. Switch SAML authentication to "Enabled," and configure each item under "Service Provider Information" as follows.
   

   Entity ID	Copy and keep a record of it
   NameID Format	Select "Unspecified"
   SSO ACS URL	Copy and keep a record of it
   All other items	All OFF

   
   
   
   
4. From the "Upload IdP Metadata" button in the upper right, upload the "metadata" you obtained from TrustLogin, and the values will be reflected in "Identity Provider Information."
   Delete the value populated in "SLO URL" to leave it blank.
   
   
   
5. Configure the "user mapping method" as follows.
   

   SAML Attribute	Name ID
   User Master Field	Email address (※)
   Login Button Text	Set if you want to change it
   Post-Logout Redirect URL	Set if you want to change it

   
   
   
   ※ You can also set the user code / employee ID, but this requires a separate custom attribute configuration on the TrustLogin side.
   
   
6. Click the "Save" button to save.
   
   
   
7. In User Management, set the TrustLogin email address in the user's "Email Address ①" field.
   Note: Setting it in "Email Address ②" will not allow authentication.
   Note: If the TrustLogin email address is registered in "Email Address ①" for multiple users (duplicated), an authentication error will occur.
   

Now go back to the TrustLogin Admin Page.

TrustLogin Admin Page Configuration (Continued)

1. Configure "Service Provider Settings" as follows.
   

   Entity ID	The "Entity ID" obtained from MA-EYES
   ACS URL for the Service	The "SSO ACS URL" obtained from MA-EYES

   
   
   
   
2. Click the "Register" button to save.

TrustLogin User Configuration

① When Users Add the App from My Page

1. On "My Page," click the "Add App" button.
2. On the "App Registration" screen, select "MA-EYES (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an Administrator Adds Members

1. In the "Admin Page > Apps" menu, search for and click the "MA-EYES (SAML)" app.
2. Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.