How to Configure SAML Authentication for MagicPod

Item

Details

Pre-check

  • Prior configuration in MagicPod is required.

  • The email address of the MagicPod account must match the email address of TrustLogin.

  • For the latest setup instructions, please refer to the manual provided by MagicPod.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "MagicPod (SAML)".
    02.png

  3. Make a note of the "IdP URL" and "Issuer / Entity ID" values under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

At this point, switch to configuring the MagicPod side.
Without clicking the "Register" button, please open MagicPod in a separate window.

MagicPod Settings

  1. Open the "Settings" screen for the target organization, and change "SAML Authentication (2.0 only supported)" to "Enable".
    Please select whether to "Allow/Disallow adding non-SAML-authenticated users" according to your operational needs.
    04_0.png

  2. Configure each item as follows, and finally save by clicking the "Update" button.
    Identity Provider Endpoint URL The "IdP URL" obtained from TrustLogin
    Identity Provider Logout URL https://portal.trustlogin.com/
    Identity Provider Identifier The "Issuer / Entity ID" obtained from TrustLogin
    Public Key Certificate Used by the Identity Provider for Signing The contents of the "Certificate" obtained from TrustLogin
    Download Service Provider Metadata Click the button to download the metadata

    04.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the metadata obtained from MagicPod to the metadata field under "Service Provider Settings".
    06.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "MagicPod (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "MagicPod (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

Switching MagicPod Authentication Settings

For password users to begin logging in via SAML authentication, they must switch their own authentication settings.

  1. Open "Account Settings" and click "Use SAML Authentication" under "Authentication Settings".
    05.png

  2. SAML settings will be enabled. After this, logging in with a password will no longer be possible. If you want to revert to logging in with a password, please perform a password reset from "Authentication Settings".
    07.png

How to Configure SAML Authentication for MagicPod

Item

Details

Pre-check

  • Prior configuration in MagicPod is required.

  • The email address of the MagicPod account must match the email address of TrustLogin.

  • For the latest setup instructions, please refer to the manual provided by MagicPod.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "MagicPod (SAML)".
    02.png

  3. Make a note of the "IdP URL" and "Issuer / Entity ID" values under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

At this point, switch to configuring the MagicPod side.
Without clicking the "Register" button, please open MagicPod in a separate window.

MagicPod Settings

  1. Open the "Settings" screen for the target organization, and change "SAML Authentication (2.0 only supported)" to "Enable".
    Please select whether to "Allow/Disallow adding non-SAML-authenticated users" according to your operational needs.
    04_0.png

  2. Configure each item as follows, and finally save by clicking the "Update" button.
    Identity Provider Endpoint URL The "IdP URL" obtained from TrustLogin
    Identity Provider Logout URL https://portal.trustlogin.com/
    Identity Provider Identifier The "Issuer / Entity ID" obtained from TrustLogin
    Public Key Certificate Used by the Identity Provider for Signing The contents of the "Certificate" obtained from TrustLogin
    Download Service Provider Metadata Click the button to download the metadata

    04.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the metadata obtained from MagicPod to the metadata field under "Service Provider Settings".
    06.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "MagicPod (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "MagicPod (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

Switching MagicPod Authentication Settings

For password users to begin logging in via SAML authentication, they must switch their own authentication settings.

  1. Open "Account Settings" and click "Use SAML Authentication" under "Authentication Settings".
    05.png

  2. SAML settings will be enabled. After this, logging in with a password will no longer be possible. If you want to revert to logging in with a password, please perform a password reset from "Authentication Settings".
    07.png