Yellowfin SAML JIT Setup Guide

Item

Details

Prior Confirmation

  • Prior configuration in Yellowfin is required.

  • This manual was created based on verification performed with Yellowfin 9.6.

  • The user's "Last Name" and "First Name" are synchronized only when the account is first created.
  • The default role configured on the Yellowfin side will be assigned. If you want to change it, the administrator must do so manually.
  • For the latest setup instructions, please check the manual provided by Yellowfin.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)
Note: For setup instructions when provisioning is enabled, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Yellowfin (SAML)".
    Yellowfin.png


  3. Make a note of the "Identity Provider URL" and "Issuer/Entity ID" values under "Identity Provider Information", then download the certificate from the "Get Certificate" button.03.png

Now, switch to configuring Yellowfin.
Do not click the "Register" button yet — open Yellowfin in a separate window.

Yellowfin Settings

  1. Log in to Yellowfin, click "Admin > System Configuration > Authentication > Authentication Method", and turn on the "SAML Single Sign-On" toggle.
    Yellowfin03.png

  2. When you turn on the toggle, the configuration screen opens. Configure it as shown below, then save the settings by clicking "Save".
    IdP's Entity ID The "Issuer/Entity ID" you noted down from TrustLogin
    IdP's SSO URL The "Identity Provider URL" you noted down from TrustLogin
    IdP's SLO URL https://portal.trustlogin.com/
    IdP's SLO Response URL Leave blank
    IdP Certificate The contents of the "Certificate" you noted down from TrustLogin
    Service Provider's Private Key Leave blank
    Service Provider's Certificate Leave blank
    Signature Algorithm RSA-SHA256
    Digest Algorithm SHA256
    Request Encryption OFF
    User ID Attribute email
    Client Reference ID Attribute Leave blank
    SSO Entry Options Attribute Leave blank
    Custom Session Parameters Attribute Leave blank
    Create New User ON
    First Name Attribute first_name
    Last Name Attribute last_name
    Email Attribute email
    Language Code Attribute Leave blank
    Password Attribute Leave blank
    Role Attribute Leave blank
    Fallback Role Leave as default

    Yellowfin04.png
    Yellowfin06.png
    Yellowfin05.png


Now return to the TrustLogin admin page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure the blank fields in "Service Provider Settings" as follows.
    Entity ID

    Yellowfin's Base URL for external report access
    Note: If you are unsure of this value, you can check it in Yellowfin under "Admin > System Configuration > System > General Settings > Base URL for external report access".

    ACS URL to Service Yellowfin's Base URL for external report access

    Yellowfin02.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Yellowfin (SAML)", and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Yellowfin (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Yellowfin SAML JIT Setup Guide

Item

Details

Prior Confirmation

  • Prior configuration in Yellowfin is required.

  • This manual was created based on verification performed with Yellowfin 9.6.

  • The user's "Last Name" and "First Name" are synchronized only when the account is first created.
  • The default role configured on the Yellowfin side will be assigned. If you want to change it, the administrator must do so manually.
  • For the latest setup instructions, please check the manual provided by Yellowfin.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)
Note: For setup instructions when provisioning is enabled, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Yellowfin (SAML)".
    Yellowfin.png


  3. Make a note of the "Identity Provider URL" and "Issuer/Entity ID" values under "Identity Provider Information", then download the certificate from the "Get Certificate" button.03.png

Now, switch to configuring Yellowfin.
Do not click the "Register" button yet — open Yellowfin in a separate window.

Yellowfin Settings

  1. Log in to Yellowfin, click "Admin > System Configuration > Authentication > Authentication Method", and turn on the "SAML Single Sign-On" toggle.
    Yellowfin03.png

  2. When you turn on the toggle, the configuration screen opens. Configure it as shown below, then save the settings by clicking "Save".
    IdP's Entity ID The "Issuer/Entity ID" you noted down from TrustLogin
    IdP's SSO URL The "Identity Provider URL" you noted down from TrustLogin
    IdP's SLO URL https://portal.trustlogin.com/
    IdP's SLO Response URL Leave blank
    IdP Certificate The contents of the "Certificate" you noted down from TrustLogin
    Service Provider's Private Key Leave blank
    Service Provider's Certificate Leave blank
    Signature Algorithm RSA-SHA256
    Digest Algorithm SHA256
    Request Encryption OFF
    User ID Attribute email
    Client Reference ID Attribute Leave blank
    SSO Entry Options Attribute Leave blank
    Custom Session Parameters Attribute Leave blank
    Create New User ON
    First Name Attribute first_name
    Last Name Attribute last_name
    Email Attribute email
    Language Code Attribute Leave blank
    Password Attribute Leave blank
    Role Attribute Leave blank
    Fallback Role Leave as default

    Yellowfin04.png
    Yellowfin06.png
    Yellowfin05.png


Now return to the TrustLogin admin page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure the blank fields in "Service Provider Settings" as follows.
    Entity ID

    Yellowfin's Base URL for external report access
    Note: If you are unsure of this value, you can check it in Yellowfin under "Admin > System Configuration > System > General Settings > Base URL for external report access".

    ACS URL to Service Yellowfin's Base URL for external report access

    Yellowfin02.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Yellowfin (SAML)", and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Yellowfin (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.