|
Item |
Details |
|
|---|---|---|
|
Prior Confirmation |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JITProvisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
- On the "Register Company App" screen, search and select "GrpMail (SAML)".
- Note down the values of "IdP URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
At this point, switch to configuring the GrpMail side.
Do not click the "Register" button yet; open GrpMail in a separate window.
GrpMail Settings
- Log in with an account that has system administrator privileges, and click "System Administration".
- Configure "SAML Authentication" as follows, and save the settings by clicking the "Save" button.
Entity ID Copy and make a note of it Assertion Consumer Service Copy and make a note of it Metadata URL The "Entity ID" you noted from TrustLogin SSO Endpoint URL The "IdP URL" you noted from TrustLogin X.509 Certificate Paste the contents of the "Certificate" you noted from TrustLogin
Return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Configure "Service Provider Settings" as follows.
Entity ID The "Entity ID" you noted from GrpMail ACS URL to Service The "Assertion Consumer Service" you noted from GrpMail
- Save by clicking the "Register" button.
GrpMail Settings (Continued)
- Open "System Administration > User Management" and select the user who will log in using SAML authentication.
- Select "SAML Authentication" for "Authentication Method". Also, enter the email address registered in TrustLogin into "Email Account for SAML Authentication", and click "Edit".
TrustLogin User Settings
① When a User Adds the App from My Page
- On "My Page", click the "Add App" button.
- On the "Register App" screen, select "GrpMail (SAML)" and click the "Next" button at the top right of the screen.
- If you want to change the "Display Name", enter it and click the "Save" button.
② When an Administrator Adds Members
- In the "Admin Page > App" menu, search for and click the "GrpMail (SAML)" app.
- Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.