How to Configure SAML Authentication for ClickUp

Item

Details

Pre-check

  • Advance configuration in ClickUp is required.

  • You must create an account in ClickUp using the same email address as your TrustLogin account.

  • For the latest configuration steps, please refer to the manual provided by ClickUp.

Name ID

Email address

Custom attribute Note: For instructions on setting up a custom attribute, see here

SP-Side Configuration

Configured by the administrator

Request the SP to configure this

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not possible)

None (accounts are created individually in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App Internal Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App Internal Browser

Android - Native App

On the standard browser and the TrustLogin mobile app's internal browser, an app download screen will be displayed. Clicking "Continue on web anyway" allows you to use the browser, but you will be asked to log in again. Once you return to the TrustLogin mobile app and click the app again, you will be able to log in via SAML.

※If you are using client authentication, SSO is not available on the iOS or Android native apps.

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Corporate App" screen and select "ClickUp (SAML)."
    clickup01.png

  3. Make a note of the value of "IdP URL" under "Identity Provider Information," and download the certificate using the "Get Certificate" button.03.png

Now, let's move on to the settings on the ClickUp side.
Do not click the "Register" button yet — open ClickUp in a separate window.

ClickUp Settings

  1. Log in to ClickUp, click the workspace name, and open "Settings."
    clickup02.png

  2. Open "Security&Permissions," and select "SAML" for "Single sign-on (SSO) ".
    clickup03.png

  3. Click "Continue."
    clickup04.png

  4. Configure "Configure SAML Single Sign On" as follows, then save the settings with "Save metadata."
    Audience URI (SP Entity ID) Copy this and keep it on hand
    Single sign on URL (ACS URL) Copy this and keep it on hand
    Login URL The "IdP URL" you noted down from TrustLogin
    IDP Public Certificate Paste the contents of the "certificate" you noted down from TrustLogin

    clickup05.png

Now, let's go back to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "Audience URI (SP Entity ID)" you noted down from ClickUp
    ACS URL to the Service The "Single sign on URL (ACS URL)" you noted down from ClickUp

    Clickup.png

  2. Save by clicking the "Register" button.

  3. Add the user currently performing the SAML configuration to the "ClickUp (SAML)" app. From "Admin Page > App," search for the "ClickUp (SAML)" app, then add the user using "Add Member."

ClickUp Settings (continued)

  1. Click "Authenticate with SAML to complete setup."
    clickup07.png

  2. Once TrustLogin is successfully linked, "Login policy" will be displayed.
    Select the option based on your company's policy.

    All users must use SAML auth: All users are required to use SAML authentication.
    All users except guests must use SAML auth: All users except guests are required to
     use SAML authentication.
    Using SAML auth is optional: Both SAML authentication and password authentication can be used.
    clickup08.png

TrustLogin User Settings

① When a User Adds the App from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "Register App" screen, select "ClickUp (SAML)," and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter a new one, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "ClickUp (SAML)" app.
  2. Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for ClickUp

Item

Details

Pre-check

  • Advance configuration in ClickUp is required.

  • You must create an account in ClickUp using the same email address as your TrustLogin account.

  • For the latest configuration steps, please refer to the manual provided by ClickUp.

Name ID

Email address

Custom attribute Note: For instructions on setting up a custom attribute, see here

SP-Side Configuration

Configured by the administrator

Request the SP to configure this

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not possible)

None (accounts are created individually in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App Internal Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App Internal Browser

Android - Native App

On the standard browser and the TrustLogin mobile app's internal browser, an app download screen will be displayed. Clicking "Continue on web anyway" allows you to use the browser, but you will be asked to log in again. Once you return to the TrustLogin mobile app and click the app again, you will be able to log in via SAML.

※If you are using client authentication, SSO is not available on the iOS or Android native apps.

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Corporate App" screen and select "ClickUp (SAML)."
    clickup01.png

  3. Make a note of the value of "IdP URL" under "Identity Provider Information," and download the certificate using the "Get Certificate" button.03.png

Now, let's move on to the settings on the ClickUp side.
Do not click the "Register" button yet — open ClickUp in a separate window.

ClickUp Settings

  1. Log in to ClickUp, click the workspace name, and open "Settings."
    clickup02.png

  2. Open "Security&Permissions," and select "SAML" for "Single sign-on (SSO) ".
    clickup03.png

  3. Click "Continue."
    clickup04.png

  4. Configure "Configure SAML Single Sign On" as follows, then save the settings with "Save metadata."
    Audience URI (SP Entity ID) Copy this and keep it on hand
    Single sign on URL (ACS URL) Copy this and keep it on hand
    Login URL The "IdP URL" you noted down from TrustLogin
    IDP Public Certificate Paste the contents of the "certificate" you noted down from TrustLogin

    clickup05.png

Now, let's go back to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "Audience URI (SP Entity ID)" you noted down from ClickUp
    ACS URL to the Service The "Single sign on URL (ACS URL)" you noted down from ClickUp

    Clickup.png

  2. Save by clicking the "Register" button.

  3. Add the user currently performing the SAML configuration to the "ClickUp (SAML)" app. From "Admin Page > App," search for the "ClickUp (SAML)" app, then add the user using "Add Member."

ClickUp Settings (continued)

  1. Click "Authenticate with SAML to complete setup."
    clickup07.png

  2. Once TrustLogin is successfully linked, "Login policy" will be displayed.
    Select the option based on your company's policy.

    All users must use SAML auth: All users are required to use SAML authentication.
    All users except guests must use SAML auth: All users except guests are required to
     use SAML authentication.
    Using SAML auth is optional: Both SAML authentication and password authentication can be used.
    clickup08.png

TrustLogin User Settings

① When a User Adds the App from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "Register App" screen, select "ClickUp (SAML)," and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter a new one, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "ClickUp (SAML)" app.
  2. Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.