|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP Configuration |
〇 |
Configured by the administrator |
|
Request SP to configure |
||
|
Provisioning |
API-based provisioning supported (account management available in TrustLogin) |
|
| 〇 |
SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported) |
|
|
|
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "WebFile (SAML JIT)".
-
Note down the values of "Identity Provider URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
Now, switch to configuring WebFile.
Do not click the "Register" button yet — open the WebFile admin screen in a separate window.
WebFile Settings
- Open "Settings > Other Settings" from the top menu.
- Click the "Configure" button under "SAML Authentication Settings".
- Configure each item as follows, and save by clicking the "Update" button.
Issuer URL The "Issuer / Entity ID" obtained from TrustLogin
SAML 2.0 Endpoint (HTTP) The "Identity Provider URL" obtained from TrustLogin X.509 Certificate The contents of the "Certificate" obtained from TrustLogin entityId Copy the value and keep it on hand assertionConsumerService Copy the value and keep it on hand
- Open "User Management" and open the edit screen for the user to apply SAML authentication to.
Note: This setting is only required for users who are already registered. Users automatically registered via SAML JIT will have this applied automatically at creation.
- Set "Authentication Method" to "SAML Authentication", enter the same email address as in TrustLogin for "Account", and save.
Now return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Configure "Service Provider Settings" as follows.
Entity ID The "entityId" obtained from WebFile ACS URL to Service The "assertionConsumerService" obtained from WebFile
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a User Adds the App via My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "WebFile (SAML JIT)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
②When an Administrator Adds Members
- Search for and click the "WebFile (SAML JIT)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.