|
Item |
Details |
|
|---|---|---|
|
Prior Confirmation |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For instructions on how to configure a custom attribute, click here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
Provisioning via API supported (account management possible in TrustLogin) |
|
| 〇 |
SAML JIT provisioning supported (account management possible in TrustLogin; user deletion not supported) |
|
|
|
None (accounts are created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
|
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
ー |
iOS - Standard Browser (Safari) |
|
|
ー |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
ー |
Android - Standard Browser (Chrome) |
|
|
ー |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
TrustLogin Admin Page Configuration
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "Nextcloud (SAML)".
- Make a note of the "Identity Provider URL" and "Issuer/Entity ID" values under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
Now, switch to configuring the Nextcloud side.
Do not click the "Register" button yet — open Nextcloud in a separate window.
Nextcloud Configuration
- Log in as an administrator, select "Apps" from the user icon in the upper right, and click "Download and enable" for "SSO & SAML authentication".
- Open "Administration settings>SSO & SAML authentication".
- Configure the items as follows.
Allow the use of multiple user back-ends (e.g. LDAP) Check this box
Note: If this is not checked, the standard login screen will no longer be displayed, and login using a password, etc. will not be possible. If you want to disable this, be sure to do so only after confirming that SAML authentication is working successfully.Attribute to map the UID. UserName Optional display name of the identity provider Any name of your choosing Identifier of the IdP entity The "Issuer/Entity ID" obtained from TrustLogin URL Target of the IdP where the SP will send the authentication request message The "Identity Provider URL" obtained from TrustLogin URL Location of IdP where the SP will send the SLO request https://portal.trustlogin.com/user/ Public X.509 certificate of the IdP Paste the contents of the "Certificate" obtained from TrustLogin Attribute to map the display name. displayname Attribute to map the email address. emailaddress
- Download the metadata from "Download metadata XML".
Return to the TrustLogin admin page again.
TrustLogin Admin Page Configuration (Continued)
- Configure "Service Provider Settings" as follows.
Login URL The "Login URL" from Nextcloud Metadata Upload the metadata from Nextcloud
- Save by clicking the "Register" button.
TrustLogin User Configuration
① When a User Adds the App via My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Nextcloud (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
②When an Administrator Adds a Member
- Search for and click the "Nextcloud (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.