TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. Search on the "Register Company App" screen and select "meclib (SAML)".
   
   
   
3. Note down the values of "Identity Provider URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate from the "Get Certificate" button.
   

Now, let's move on to the settings on the meclib side.
Do not click the "Register" button yet; please open meclib in a separate window.

meclib Settings

1. Open "Book Management > System Management".
   
   
   
2. Open "Single Sign-On Settings (SAML Authentication) > IDP Server Settings".
   
   
   
3. Configure each item as follows, and finally save by clicking the "Complete" button.
   

   Enable SAML Authentication	Select "Enabled"
   Entity ID	The "Issuer / Entity ID" obtained from TrustLogin
   Single Sign-On Service URL	The "Identity Provider URL" obtained from TrustLogin
   Single Logout URL (Note)	https://portal.trustlogin.com/
   IDP Certificate	The contents of the "Certificate" obtained from TrustLogin

   Note: Single logout is not currently supported.
   
   
   
   
4. Return to the System Management top page and open "Service Provider Information".
   
   
   
5. Note down the values of "Entity ID", "Assertion Consumer Service URL", and "Single Logout Service URL".
   
   
   
6. Open "Public Site Management > Feature Settings".
   
   
   
7. Select the public site for which you want to enable SAML authentication, and check "Require" and "Use SAML Authentication" under "Login".
   
   
   
8. Open "Public Site Management > Public Group Settings".
   
   
   
9. Click "Create SAML Authentication Group", configure each item, and click the "Create" button to create it.
   
   
   
   
   
10. Open "Book Settings" for the SAML authentication group you created, check the books to allow operations on, and save by clicking the "Complete" button.
    
    
    

Now, return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

1. Configure the "Service Provider Settings" as follows.
   

   Entity ID	The "Entity ID" obtained from meclib
   ACS URL to Service	The "Assertion Consumer Service URL" obtained from meclib
   Logout URL (Note)	The "Single Logout Service URL" obtained from meclib

   Note: Single logout is planned as a future feature addition, but it is not currently implemented and does not function.
   
   
   
   
2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select "meclib (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

1. Search for and click the "meclib (SAML)" app in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.