How to Configure SAML Authentication for AeyeScan

Item

Details

Pre-check

  • Prior configuration in AeyeScan is required.

  • You need to create an account in AeyeScan with the same email address as TrustLogin in advance.

  • For the latest setup instructions, please check the manual provided by AeyeScan.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "AeyeScan (SAML)".
    AeyeScan03.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".03.png

Now, switch to the settings on the AeyeScan side.
Do not click the "Register" button yet, and open AeyeScan in a separate window.

AeyeScan Settings

  1. Log in to AeyeScan and select "Account Management > SSO Settings > Change SSO Settings".
    AeyeScan.png

  2. Configure the settings as follows and save them by clicking "Change SSO Settings".
    Integration Target SAML
    Configuration Information

    Download the AeyeScan metadata

    IdP Metadata Upload the metadata you saved from TrustLogin
    Roles Allowed to Log In with Password Select the roles that can log in with either SSO or password
    Note: If you set all roles to disallow password login, please confirm in advance that SSO integration works correctly.
    Default Setting When Creating a New Custom Role Select whether newly created custom roles can log in with a password

    AeyeScan02.png

Now, return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the metadata you saved from AeyeScan to "Metadata" under "Service Provider Settings".
    AeyeScan04.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "AeyeScan (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "AeyeScan (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Log In

When you click the app from the TrustLogin My Page, the account selection screen shown below will appear. Check the account, then click the login button.
AeyeScan05.png

How to Configure SAML Authentication for AeyeScan

Item

Details

Pre-check

  • Prior configuration in AeyeScan is required.

  • You need to create an account in AeyeScan with the same email address as TrustLogin in advance.

  • For the latest setup instructions, please check the manual provided by AeyeScan.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "AeyeScan (SAML)".
    AeyeScan03.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".03.png

Now, switch to the settings on the AeyeScan side.
Do not click the "Register" button yet, and open AeyeScan in a separate window.

AeyeScan Settings

  1. Log in to AeyeScan and select "Account Management > SSO Settings > Change SSO Settings".
    AeyeScan.png

  2. Configure the settings as follows and save them by clicking "Change SSO Settings".
    Integration Target SAML
    Configuration Information

    Download the AeyeScan metadata

    IdP Metadata Upload the metadata you saved from TrustLogin
    Roles Allowed to Log In with Password Select the roles that can log in with either SSO or password
    Note: If you set all roles to disallow password login, please confirm in advance that SSO integration works correctly.
    Default Setting When Creating a New Custom Role Select whether newly created custom roles can log in with a password

    AeyeScan02.png

Now, return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the metadata you saved from AeyeScan to "Metadata" under "Service Provider Settings".
    AeyeScan04.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "AeyeScan (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "AeyeScan (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Log In

When you click the app from the TrustLogin My Page, the account selection screen shown below will appear. Check the account, then click the login button.
AeyeScan05.png