How to Configure SAML Authentication for Pocket Payroll

Item

Details

Pre-check

  • Prior configuration in Pocket Payroll is required.

  • The SSO user ID in Pocket Payroll must match the email address registered in TrustLogin.

  • For the latest setup instructions, please check the manual provided by Pocket Payroll.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Pocket Payroll (SAML)".
    ポケット給与.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".03.png

  4. Save by clicking the "Register" button.

  5. Send the metadata to your contact at ICS Solutions Co., Ltd. and request SAML configuration. You will also receive the Pocket Payroll SSO configuration information.

  6. Once you receive notification from ICS Solutions Co., Ltd. that the SAML configuration is complete, open "App Management Screen > Change SAML App Settings" and configure the "Service Provider Settings" as follows.
    Entity ID The "SP SAML Authentication Identification ID (Entity ID)" from Pocket Payroll
    ACS URL for the Service The "SP Authentication Response Receiving URL" from Pocket Payroll

    ポケット給与01.png

  7. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Pocket Payroll (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Pocket Payroll (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for Pocket Payroll

Item

Details

Pre-check

  • Prior configuration in Pocket Payroll is required.

  • The SSO user ID in Pocket Payroll must match the email address registered in TrustLogin.

  • For the latest setup instructions, please check the manual provided by Pocket Payroll.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Pocket Payroll (SAML)".
    ポケット給与.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".03.png

  4. Save by clicking the "Register" button.

  5. Send the metadata to your contact at ICS Solutions Co., Ltd. and request SAML configuration. You will also receive the Pocket Payroll SSO configuration information.

  6. Once you receive notification from ICS Solutions Co., Ltd. that the SAML configuration is complete, open "App Management Screen > Change SAML App Settings" and configure the "Service Provider Settings" as follows.
    Entity ID The "SP SAML Authentication Identification ID (Entity ID)" from Pocket Payroll
    ACS URL for the Service The "SP Authentication Response Receiving URL" from Pocket Payroll

    ポケット給与01.png

  7. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Pocket Payroll (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Pocket Payroll (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.