|
Item |
Details |
|
|---|---|---|
|
Prior Confirmation |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
|
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
ー |
iOS - Standard Browser (Safari) |
|
|
ー |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
ー |
Android - Standard Browser (Chrome) |
|
|
ー |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "Yellowfin (SAML)".
- Make a note of the "Identity Provider URL" and "Issuer/Entity ID" values under "Identity Provider Information", then download the certificate from the "Get Certificate" button.
Now, switch to configuring Yellowfin.
Do not click the "Register" button yet — open Yellowfin in a separate window.
Yellowfin Settings
- Log in to Yellowfin, click "Admin > System Configuration > Authentication > Authentication Method", and turn on the "SAML Single Sign-On" toggle.
- When you turn on the toggle, the configuration screen opens. Configure it as shown below, then save the settings by clicking "Save".
IdP's Entity ID The "Issuer/Entity ID" you noted down from TrustLogin IdP's SSO URL The "Identity Provider URL" you noted down from TrustLogin IdP's SLO URL https://portal.trustlogin.com/ IdP's SLO Response URL Leave blank IdP Certificate The contents of the "Certificate" you noted down from TrustLogin Service Provider's Private Key Leave blank Service Provider's Certificate Leave blank Signature Algorithm RSA-SHA256 Digest Algorithm SHA256 Request Encryption OFF User ID Attribute email Client Reference ID Attribute Leave blank SSO Entry Options Attribute Leave blank Custom Session Parameters Attribute Leave blank Create New User ON First Name Attribute first_name Last Name Attribute last_name Email Attribute email Language Code Attribute Leave blank Password Attribute Leave blank Role Attribute Leave blank Fallback Role Leave as default
Now return to the TrustLogin admin page again.
TrustLogin Admin Page Settings (Continued)
- Configure the blank fields in "Service Provider Settings" as follows.
Entity ID Yellowfin's Base URL for external report access
Note: If you are unsure of this value, you can check it in Yellowfin under "Admin > System Configuration > System > General Settings > Base URL for external report access".ACS URL to Service Yellowfin's Base URL for external report access
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Yellowfin (SAML)", and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it, then click the "Register" button.
②When an administrator adds members
- Search for and click the "Yellowfin (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.