How to Configure SAML Authentication for FlexCRM

 Item

Details 

Pre-check

  • Prior configuration in FlexCRM is required.

  • The user ID in FlexCRM must match the email address registered in TrustLogin.

  • For the latest setup instructions, please check the manual provided by FlexCRM.

Name ID

Email address

 

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

 

Request SP to configure

Provisioning

 

API-based Provisioning supported (account management available in TrustLogin)

 

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

 

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

Note: If you are using client authentication, SSO is not available on iOS - Native App or Android - Native App.

 

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "FlexCRM (SAML)".
    FlexCRM001.png

  3. Under "Identity Provider Information," note down the values of "Identity Provider URL" and "Issuer / Entity ID," and download the certificate using the "Get Certificate" button.03.png

  4. Convert the extension of the downloaded certificate to ".cer".

  5. In the "Service Provider Settings," enter the FlexCRM "Workspace ID" into the blank fields for "Login URL," "Entity ID," and "Service ACS URL".
    FlexCRM04.png

  6. Save by clicking the "Register" button.

Next, switch to configuring the FlexCRM side.

FlexCRM Settings

  1. Log in to FlexCRM and click the hamburger menu in the upper left of the screen.
    FlexCRM.png

  2. Select "System Settings".
    FlexCRM02.png

  3. Open "Login Policy Settings," configure the "SAML Authentication" section as shown below, and save the settings by clicking "Save".
    Enable SAML Authentication Check the box
    Identity Provider entityID The "Entity ID" noted down from TrustLogin
    Identity Provider SSO Endpoint URL (HTTP-Redirect) The "Identity Provider URL" noted down from TrustLogin
    Identity Provider SLO Endpoint URL (HTTP-Redirect) https://portal.trustlogin.com/
    URL to redirect to after logging out of FlexCRM https://portal.trustlogin.com/
    Public key certificate used by the Identity Provider for signing Using the "Browse" button, upload the version of the "Certificate" noted down from TrustLogin with the extension converted to .cer

    FlexCRM03.png

 

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "FlexCRM (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "FlexCRM (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for FlexCRM

 Item

Details 

Pre-check

  • Prior configuration in FlexCRM is required.

  • The user ID in FlexCRM must match the email address registered in TrustLogin.

  • For the latest setup instructions, please check the manual provided by FlexCRM.

Name ID

Email address

 

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

 

Request SP to configure

Provisioning

 

API-based Provisioning supported (account management available in TrustLogin)

 

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

 

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

Note: If you are using client authentication, SSO is not available on iOS - Native App or Android - Native App.

 

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "FlexCRM (SAML)".
    FlexCRM001.png

  3. Under "Identity Provider Information," note down the values of "Identity Provider URL" and "Issuer / Entity ID," and download the certificate using the "Get Certificate" button.03.png

  4. Convert the extension of the downloaded certificate to ".cer".

  5. In the "Service Provider Settings," enter the FlexCRM "Workspace ID" into the blank fields for "Login URL," "Entity ID," and "Service ACS URL".
    FlexCRM04.png

  6. Save by clicking the "Register" button.

Next, switch to configuring the FlexCRM side.

FlexCRM Settings

  1. Log in to FlexCRM and click the hamburger menu in the upper left of the screen.
    FlexCRM.png

  2. Select "System Settings".
    FlexCRM02.png

  3. Open "Login Policy Settings," configure the "SAML Authentication" section as shown below, and save the settings by clicking "Save".
    Enable SAML Authentication Check the box
    Identity Provider entityID The "Entity ID" noted down from TrustLogin
    Identity Provider SSO Endpoint URL (HTTP-Redirect) The "Identity Provider URL" noted down from TrustLogin
    Identity Provider SLO Endpoint URL (HTTP-Redirect) https://portal.trustlogin.com/
    URL to redirect to after logging out of FlexCRM https://portal.trustlogin.com/
    Public key certificate used by the Identity Provider for signing Using the "Browse" button, upload the version of the "Certificate" noted down from TrustLogin with the extension converted to .cer

    FlexCRM03.png

 

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "FlexCRM (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "FlexCRM (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.