|
Details |
||
|---|---|---|
|
Prior Confirmation |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For instructions on how to configure a custom attribute, see here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management possible in TrustLogin) |
|
|
SAML JIT Provisioning supported (account management possible in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts are created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "hacomono (SAML)".
- Note down the values of "Identity Provider URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate from the "Get Certificate" button.
Now, let's move on to the settings on the hacomono side.
Do not click the "Register" button yet — open hacomono in a separate window.
hacomono Settings
- Open the "Admin Site (SAML)" tab under "System > Single Sign-On Settings".
-
For "Basic Settings", we recommend "Use SAML authentication only".
However, for the initial setup, we recommend configuring it with "Use password authentication and SAML authentication", and switching after confirming that SAML authentication succeeds.
- Configure the "SAML Identity Provider Settings" items as follows, and finally save by clicking the "Save" button.
Entity ID The "Issuer/Entity ID" obtained from TrustLogin Single Sign-On URL The "Identity Provider URL" obtained from TrustLogin Certificate The contents of the "Certificate" obtained from TrustLogin
- Copy and note down the "Single Sign-On URL" and "Entity ID" under "SAML Service Provider Information".
Now, go back to the TrustLogin Admin Page.
TrustLogin Admin Page Settings (Continued)
-
Configure the "Service Provider Settings" as follows.
Entity ID
The "Entity ID" obtained from hacomono
ACS URL for the Service
The "Single Sign-On URL" obtained from hacomono
- Click the "Register" button to save.
TrustLogin User Settings
① When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "hacomono (SAML)", and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it, then click the "Register" button.
②When an administrator adds members
- Search for and click the "hacomono (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.
hacomono User Settings
- Add the user under "System > Admin Users".
Note: Please select the "authentication method" that best suits your preference.
We recommend "Use SAML authentication only", but we recommend that at least one user, such as a system administrator, select "Use password authentication and SAML authentication".