|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP Configuration |
〇 |
Configured by the administrator |
|
Request SP to configure |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Device Compatibility |
〇 |
PC - Browser |
|
〇 |
PC - Desktop App |
|
|
〇 |
iOS - Default Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
〇 |
iOS - Native App |
|
|
〇 |
Android - Default Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
〇 |
Android - Native App |
|
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "Envoy (SAML)".
- Under "Identity Provider Information", note the value of the "Identity Provider URL" and download the certificate using the "Download Certificate" button.
- Save by clicking the "Register" button.
- Change the certificate's file extension to .cer or .crt, and open the certificate.
-
Open the "Details" tab, and copy and keep a note of the value shown in the "Thumbprint" field.
(You will enter this later in Envoy as the fingerprint.)
Envoy Settings
- Log in to Envoy and open "Apps > Directory and SSO > Directory settings".
- Install "SAML" and open its settings via "Configure".
- Configure as follows and click "Save" to save the settings.
Fingerprint Enter the thumbprint value obtained from the TrustLogin certificate Identity Provider HTTP SAML URL The "Identity Provider URL" obtained from TrustLogin Required When turned on, only global administrators can log in with a password, and all other users are required to log in via SSO. Configure this as needed.
Note: Turning this on also enables SSO for logins from the Envoy mobile app.Sign On URL (SP-initiated only) This is the URL used for SP-initiated SSO. Make a note of it if needed.
TrustLogin User Settings
① When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Envoy (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
②When an administrator adds members
- Search for and click the "Envoy (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.