|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
ー |
iOS - Standard Browser (Safari) |
|
|
ー |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
ー |
Android - Standard Browser (Chrome) |
|
|
ー |
Android - TrustLogin Mobile App In-App Browser |
|
| ー | Android - Native App | |
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "MagicPod (SAML)".
- Make a note of the "IdP URL" and "Issuer / Entity ID" values under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
At this point, switch to configuring the MagicPod side.
Without clicking the "Register" button, please open MagicPod in a separate window.
MagicPod Settings
- Open the "Settings" screen for the target organization, and change "SAML Authentication (2.0 only supported)" to "Enable".
Please select whether to "Allow/Disallow adding non-SAML-authenticated users" according to your operational needs.
- Configure each item as follows, and finally save by clicking the "Update" button.
Identity Provider Endpoint URL The "IdP URL" obtained from TrustLogin Identity Provider Logout URL https://portal.trustlogin.com/ Identity Provider Identifier The "Issuer / Entity ID" obtained from TrustLogin Public Key Certificate Used by the Identity Provider for Signing The contents of the "Certificate" obtained from TrustLogin Download Service Provider Metadata Click the button to download the metadata
Return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Upload the metadata obtained from MagicPod to the metadata field under "Service Provider Settings".
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "MagicPod (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Save" button.
②When an administrator adds members
- Search for and click the "MagicPod (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.
Switching MagicPod Authentication Settings
For password users to begin logging in via SAML authentication, they must switch their own authentication settings.
- Open "Account Settings" and click "Use SAML Authentication" under "Authentication Settings".
- SAML settings will be enabled. After this, logging in with a password will no longer be possible. If you want to revert to logging in with a password, please perform a password reset from "Authentication Settings".