Preparation

●TrustLogin Configuration

You need to configure a custom attribute in advance to link the company ID of Ekispert Commuting Expenses Web to the member information in TrustLogin. Set the company ID of Ekispert Commuting Expenses Web as the attribute value.

[TrustLogin Custom Attribute Configuration Example]

Please refer to the following pages for configuration instructions.

• Custom Attribute Setup (Individual Registration)
• Custom Attribute Setup (Bulk Registration)

●Ekispert Commuting Expenses Web Configuration

Select an employee from "Master Management > Employee Information" and enter the same
email address as TrustLogin in the "SSO-ID" field.

TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register SAML App" button in the upper right of the screen.
   
   
   
   
2. Register the "Application Name" and "Icon" (optional).
   
   
   
3. Download the metadata using the "Download Metadata" button under "Identity Provider Information". Also, download the certificate using the "Get Certificate" button.
   
   
4. Configure the "Service Provider Settings" as follows.

   Name ID Value	Select "Member" - "email" (default setting)
   Entity ID	TsukinhiWeb
   Name ID Format	unspecified
   ACS URL for the Service	https://teiki.ekispert.com/teiki/Saml2/Acs

   
   
   
   
5. Add a row (attribute) using the "Add SAML Attribute" button under "SAML Attribute Settings" and configure it as follows.
   

   Service Provider Attribute			TrustLogin (IdP) Attribute
   Attribute Name	Attribute Type	Attribute Name		Attribute Value
   tenantid	Unspecified	tenantid	Custom attribute	The attribute name you configured

   
   
   
   
6. Save by clicking the "Register" button.
   
   
7. Send the TrustLogin metadata and certificate to your contact at Val Laboratory Corporation and request SAML configuration.
   
   
8. Once you receive notification from your contact at Val Laboratory Corporation that the metadata configuration is complete, add the app and try SAML authentication.

Ekispert Commuting Expenses Web Configuration

1. Select an employee from "Master Management > Employee Information". For "Password Login," select either "Not allowed (SSO only)" or "Allowed," and update the information.
   Note: If you select "Not allowed (SSO only)," users will no longer be able to set a new password or reset their password. This setting also changes the login URL included in notification emails.
   (SSO only → URL for SSO login; Password allowed → URL for password login)
   

TrustLogin User Settings

① When a user adds the app from My Page

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select the custom SAML app you created, and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

1. Search for and click the custom SAML app you created in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.