TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. Search on the "Register Company App" screen and select "Bakuraku (SAML)".
   
   
   
3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".
   
   

Now, let's move on to the settings on the Bakuraku side.
Do not click the "Register" button yet; open Bakuraku in a separate window.

Bakuraku Settings

1. Log in to Bakuraku Common Admin and open "Authentication Settings Management > Authentication Settings > SSO (SAML) Settings". Configure the settings as follows and save by clicking the "Save" button.
   

   Enable SAML	Enabled
   Log in with SAML only	When enabled, login will only be possible via SSO (SAML), and login with email address/password will no longer be available. We recommend enabling this only after confirming that SAML authentication is working successfully.
   External Identity Provider Information (Required)	Upload the metadata obtained from TrustLogin using "Select File"
   Service Provider Information	Download the metadata using "Download SP Metadata"

   
   

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

1. Upload the metadata obtained from Bakuraku to "Metadata" under "Service Provider Settings".
   
   
   
2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select "Bakuraku (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

1. Search for and click the "Bakuraku (SAML)" app in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.