|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP Configuration |
〇 |
Configured by the administrator |
|
Request SP to configure |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Device Compatibility |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
ー |
iOS - Default Browser (Safari) |
|
|
ー |
iOS - TrustLogin Mobile App In-App Browser |
|
|
〇 |
iOS - Native App |
|
|
ー |
Android - Default Browser (Chrome) |
|
|
ー |
Android - TrustLogin Mobile App In-App Browser |
|
|
〇 |
Android - Native App |
|
Note: If you are using client authentication, SSO is not available on iOS - Native App or Android - Native App.
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "Narekan (SAML)".
- Download the metadata using the "Download Metadata" button under "Identity Provider Information".
Now, switch to configuring the Narekan side.
Do not click the "Register" button yet; open Narekan in a separate window.
Narekan Settings
- Click "Settings > Change Team Settings".
- Open "Single Sign-On", configure it as shown below, and click "Change".
Entity ID Copy and keep a note of it ACS URL Copy and keep a note of it Upload XML File Upload the metadata you noted down from TrustLogin Enable Single Sign-On Select "Migration Mode"
Note: In "Migration Mode", login with a password is also possible. Once you have confirmed that team members can log in via single sign-on, we recommend switching to "Single Sign-On Only" mode.
- After clicking the "Change" button, the "Single Sign-On URL" will be displayed.
This is the URL for SP-initiated SSO, so make a note of it if needed.
Return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Configure "Service Provider Settings" as follows.
Entity ID The "Entity ID" you noted down from Narekan Service ACS URL The "ACS URL" you noted down from Narekan
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Narekan (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
②When an administrator adds members
- Search for and click the "Narekan (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.
How to Log In from the Mobile App
Install the mobile app and select "More > Single Sign-On".
Enter your team's domain and click "Log In" to be redirected to the TrustLogin login screen.
Note: Your team's domain is the "***" portion of the Narekan URL "https://www.narekan.jp/sso/***/sign-in".