SecureNavi SAML JIT Setup Guide

Item

Details

Prior Confirmation

  • Prior configuration in SecureNavi is required.

  • SecureNavi's SAML authentication feature is provided as a beta version. This manual was created based on operational verification of the features implemented as of August 2024.
    Note: For details, see here
  • User information (last name/first name) is synced only when the account is first created.

  • For the latest setup instructions, please check the manual provided by SecureNavi.

Name ID

Email address

Custom attribute Note: For instructions on how to configure a custom attribute, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Provisioning via API supported (account management possible in TrustLogin)

SAML JIT provisioning supported (account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "SecureNavi (SAML)".
    SecureNavi.png

  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".
    03.png

Now, switch to configuring SecureNavi.
Do not click the "Register" button yet — open SecureNavi in a separate window.

SecureNavi Settings

  1. Open "Settings & Reference Information > General Settings".
    04.png

  2. Copy and note down the values of "ACS URL" and "Entity ID" under "SSO Settings (Beta)".
    Click the "Upload metadata file and activate" button, and upload the metadata obtained from TrustLogin.
    05.png

Now return to the TrustLogin admin page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Login URL Your SecureNavi login URL
    Entity ID The "Entity ID" obtained from SecureNavi
    ACS URL to Service The "ACS URL" obtained from SecureNavi

    06.png

  2. Click the "Register" button to save.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "SecureNavi (SAML)", and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

②When an administrator adds members

  1. Search for and click the "SecureNavi (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Login Method

  1. Click the app from the TrustLogin My Page or browser extension, or open the SecureNavi login page directly, then click "Log in with SAML SSO".
    07.png

  2. If you are not logged in to TrustLogin, you will be redirected to the TrustLogin authentication screen. After authentication, you will be logged in to SecureNavi.

SecureNavi SAML JIT Setup Guide

Item

Details

Prior Confirmation

  • Prior configuration in SecureNavi is required.

  • SecureNavi's SAML authentication feature is provided as a beta version. This manual was created based on operational verification of the features implemented as of August 2024.
    Note: For details, see here
  • User information (last name/first name) is synced only when the account is first created.

  • For the latest setup instructions, please check the manual provided by SecureNavi.

Name ID

Email address

Custom attribute Note: For instructions on how to configure a custom attribute, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Provisioning via API supported (account management possible in TrustLogin)

SAML JIT provisioning supported (account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "SecureNavi (SAML)".
    SecureNavi.png

  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".
    03.png

Now, switch to configuring SecureNavi.
Do not click the "Register" button yet — open SecureNavi in a separate window.

SecureNavi Settings

  1. Open "Settings & Reference Information > General Settings".
    04.png

  2. Copy and note down the values of "ACS URL" and "Entity ID" under "SSO Settings (Beta)".
    Click the "Upload metadata file and activate" button, and upload the metadata obtained from TrustLogin.
    05.png

Now return to the TrustLogin admin page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Login URL Your SecureNavi login URL
    Entity ID The "Entity ID" obtained from SecureNavi
    ACS URL to Service The "ACS URL" obtained from SecureNavi

    06.png

  2. Click the "Register" button to save.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "SecureNavi (SAML)", and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

②When an administrator adds members

  1. Search for and click the "SecureNavi (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Login Method

  1. Click the app from the TrustLogin My Page or browser extension, or open the SecureNavi login page directly, then click "Log in with SAML SSO".
    07.png

  2. If you are not logged in to TrustLogin, you will be redirected to the TrustLogin authentication screen. After authentication, you will be logged in to SecureNavi.