How to Configure SAML Authentication for hacomono

Details

Prior Confirmation

  • Prior configuration in hacomono is required.

  • You must create an account in hacomono using the same email address as your TrustLogin account.

Name ID

Email address

Custom attribute Note: For instructions on how to configure a custom attribute, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management possible in TrustLogin)

SAML JIT Provisioning supported (account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "hacomono (SAML)".


  3. Note down the values of "Identity Provider URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate from the "Get Certificate" button.03.png

Now, let's move on to the settings on the hacomono side.
Do not click the "Register" button yet — open hacomono in a separate window.

hacomono Settings

  1. Open the "Admin Site (SAML)" tab under "System > Single Sign-On Settings".


  2. For "Basic Settings", we recommend "Use SAML authentication only".

    However, for the initial setup, we recommend configuring it with "Use password authentication and SAML authentication", and switching after confirming that SAML authentication succeeds.

  3. Configure the "SAML Identity Provider Settings" items as follows, and finally save by clicking the "Save" button.
    Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    Single Sign-On URL The "Identity Provider URL" obtained from TrustLogin
    Certificate The contents of the "Certificate" obtained from TrustLogin




  4. Copy and note down the "Single Sign-On URL" and "Entity ID" under "SAML Service Provider Information".

Now, go back to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure the "Service Provider Settings" as follows.

    Entity ID

    The "Entity ID" obtained from hacomono

    ACS URL for the Service

    The "Single Sign-On URL" obtained from hacomono



  2. Click the "Register" button to save.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "hacomono (SAML)", and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

②When an administrator adds members

  1. Search for and click the "hacomono (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

hacomono User Settings

  1. Add the user under "System > Admin Users".

    Note: Please select the "authentication method" that best suits your preference.
    We recommend "Use SAML authentication only", but we recommend that at least one user, such as a system administrator, select "Use password authentication and SAML authentication".

How to Configure SAML Authentication for hacomono

Details

Prior Confirmation

  • Prior configuration in hacomono is required.

  • You must create an account in hacomono using the same email address as your TrustLogin account.

Name ID

Email address

Custom attribute Note: For instructions on how to configure a custom attribute, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management possible in TrustLogin)

SAML JIT Provisioning supported (account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "hacomono (SAML)".


  3. Note down the values of "Identity Provider URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate from the "Get Certificate" button.03.png

Now, let's move on to the settings on the hacomono side.
Do not click the "Register" button yet — open hacomono in a separate window.

hacomono Settings

  1. Open the "Admin Site (SAML)" tab under "System > Single Sign-On Settings".


  2. For "Basic Settings", we recommend "Use SAML authentication only".

    However, for the initial setup, we recommend configuring it with "Use password authentication and SAML authentication", and switching after confirming that SAML authentication succeeds.

  3. Configure the "SAML Identity Provider Settings" items as follows, and finally save by clicking the "Save" button.
    Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    Single Sign-On URL The "Identity Provider URL" obtained from TrustLogin
    Certificate The contents of the "Certificate" obtained from TrustLogin




  4. Copy and note down the "Single Sign-On URL" and "Entity ID" under "SAML Service Provider Information".

Now, go back to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure the "Service Provider Settings" as follows.

    Entity ID

    The "Entity ID" obtained from hacomono

    ACS URL for the Service

    The "Single Sign-On URL" obtained from hacomono



  2. Click the "Register" button to save.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "hacomono (SAML)", and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

②When an administrator adds members

  1. Search for and click the "hacomono (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

hacomono User Settings

  1. Add the user under "System > Admin Users".

    Note: Please select the "authentication method" that best suits your preference.
    We recommend "Use SAML authentication only", but we recommend that at least one user, such as a system administrator, select "Use password authentication and SAML authentication".