Runbook SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Runbook is required.

  • Please refer to the manual provided by Runbook for the latest configuration steps.

Name ID

〇

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

〇

Configured by the administrator

Request SP to configure

Provisioning

API-based provisioning supported (account management available in TrustLogin)

〇

SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

〇

IdP-Initiated SSO

Device Compatibility

〇

PC - Browser

ー

PC - Desktop App

〇

iOS - Default Browser (Safari)

〇

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

〇

Android - Default Browser (Chrome)

〇

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Runbook (SAML)".
    02.png

  3. Note down the values of "Identity Provider URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

  4. Convert the extension of the downloaded certificate to ".cer".

Now, switch to configuring Runbook.
Do not click the "Register" button yet — open Runbook in a separate window.

Runbook Settings

  1. Open the organization name dropdown in the upper right and select "Billing / Security".
    04.png

  2. Open "Single Sign-On" and check "Enable SAML Authentication".
    05.png
  3. Configure each item as follows, and save by clicking the "Register" button.
    Login URL The "Identity Provider URL" obtained from TrustLogin
    Entity ID The "Issuer / Entity ID" obtained from TrustLogin
    Signing Certificate The "Certificate" obtained from TrustLogin, converted to a .cer file
    Automatically create users Check this box
    Note: Checking "Require SAML Authentication" disables password login, restricting the login method to SAML authentication only. If you want to apply this restriction, we recommend switching over only after confirming the single sign-on connection is successful and notifying your users.

    006jit.png

  4. Click "Download Metadata" to obtain the metadata.
    07.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the metadata obtained from Runbook to the metadata field under "Service Provider Settings".
    08.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App via My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Runbook (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an Administrator Adds Members

  1. Search for and click the "Runbook (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Runbook SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Runbook is required.

  • Please refer to the manual provided by Runbook for the latest configuration steps.

Name ID

〇

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

〇

Configured by the administrator

Request SP to configure

Provisioning

API-based provisioning supported (account management available in TrustLogin)

〇

SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

〇

IdP-Initiated SSO

Device Compatibility

〇

PC - Browser

ー

PC - Desktop App

〇

iOS - Default Browser (Safari)

〇

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

〇

Android - Default Browser (Chrome)

〇

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Runbook (SAML)".
    02.png

  3. Note down the values of "Identity Provider URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

  4. Convert the extension of the downloaded certificate to ".cer".

Now, switch to configuring Runbook.
Do not click the "Register" button yet — open Runbook in a separate window.

Runbook Settings

  1. Open the organization name dropdown in the upper right and select "Billing / Security".
    04.png

  2. Open "Single Sign-On" and check "Enable SAML Authentication".
    05.png
  3. Configure each item as follows, and save by clicking the "Register" button.
    Login URL The "Identity Provider URL" obtained from TrustLogin
    Entity ID The "Issuer / Entity ID" obtained from TrustLogin
    Signing Certificate The "Certificate" obtained from TrustLogin, converted to a .cer file
    Automatically create users Check this box
    Note: Checking "Require SAML Authentication" disables password login, restricting the login method to SAML authentication only. If you want to apply this restriction, we recommend switching over only after confirming the single sign-on connection is successful and notifying your users.

    006jit.png

  4. Click "Download Metadata" to obtain the metadata.
    07.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the metadata obtained from Runbook to the metadata field under "Service Provider Settings".
    08.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App via My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Runbook (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an Administrator Adds Members

  1. Search for and click the "Runbook (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.