|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP Configuration |
〇 |
Configured by the administrator |
|
Request SP to configure |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Device Compatibility |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Default Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Default Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "WebFile (SAML)".
-
Note the values of "IdP URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
Now, let's move on to the settings on the WebFile side.
Do not click the "Register" button yet; open the WebFile admin screen in a separate window.
WebFile Settings
- Open "Settings > Other Settings" from the top menu.
- Click the "Configure" button for "SAML Authentication Settings".
- Configure each item as follows, and save by clicking the "Update" button.
Issuer URL The "Issuer / Entity ID" obtained from TrustLogin
SAML 2.0 Endpoint (HTTP) The "IdP URL" obtained from TrustLogin X.509 Certificate The contents of the "Certificate" obtained from TrustLogin entityId Copy and note down the value assertionConsumerService Copy and note down the value
- Open "User Management" and open the edit screen for the user to whom you want to apply SAML authentication.
- Set "Authentication Method" to "SAML Authentication", enter the same email address as in TrustLogin in "Account", and save.
Now return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Configure "Service Provider Settings" as follows.
Entity ID The "entityId" obtained from WebFile ACS URL for the Service The "assertionConsumerService" obtained from WebFile
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "WebFile (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Save" button.
②When an administrator adds members
- Search for and click the "WebFile (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.