Item	Details
Pre-check	Prior configuration in FutureVuls is required. You must create an account in FutureVuls using the same email address as your TrustLogin account. Please refer to the manual provided by FutureVuls for the latest configuration steps.
Name ID	〇	Email address
		Custom attribute　Note: For how to configure custom attributes, see here
SP Configuration	〇	Configured by the administrator
		Request configuration from the SP
Provisioning		API-based Provisioning supported (account management available in TrustLogin)
		SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
	〇	None (accounts created in each system)
Access Method	〇	SP-Initiated SSO
	ー	IdP-Initiated SSO
Device Compatibility	〇	PC - Browser
	ー	PC - Desktop App
	ー	iOS - Default Browser (Safari)
	ー	iOS - TrustLogin Mobile App In-App Browser
	ー	iOS - Native App
	ー	Android - Default Browser (Chrome)
	ー	Android - TrustLogin Mobile App In-App Browser
	ー	Android - Native App
SAML Authentication Scope	ー	Enabled for all users (SAML authentication only)
	〇	The following settings can be selected: ・Enabled for all users ・Enabled only for users to whom the SP has applied SAML authentication (SAML authentication and password authentication can be used together)
Notes	SAML SSO is only available on the CISRT plan. SAML SSO from a smartphone is only possible when the "SSO Login Screen URL" is opened directly in Google Chrome. SAML SSO cannot be performed using the TrustLogin mobile app.

 

Table of Contents: TrustLogin Admin Page Settings FutureVuls Settings TrustLogin Admin Page Settings (Continued) TrustLogin User Settings FutureVuls User Settings After SAML Configuration

 

TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. Search on the "Register Company App" screen and select "FutureVuls (SAML)".
   
   
   
3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".
   

Now, switch to configuring FutureVuls.
Do not click the "Register" button yet — open FutureVuls in a separate window.

FutureVuls Settings

1. Open the "Organization Settings" screen.
   
   
   
2. Open "Security" in the menu and click the "Register SAML IDP" button.
   
   
   
3. Configure each item as follows, then click the "Change" button.
   

   SAML IdP Name	Set any name you like, such as "TrustLogin"
   Email Attribute Definition	Enter http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
   Metadata	Click the "Register Metadata File" button and upload the metadata obtained from TrustLogin

   
   
   
   
4. Confirm that the IdP configuration you set has been added, and note down the values of "SSO Endpoint", "Entity ID (SP)", and "SSO Login Screen URL".
   
   
   

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

1. Configure "Service Provider Settings" as follows.
   

   Login URL	The "SSO Login Screen URL" obtained from FutureVuls
   Entity ID	The "Entity ID (SP)" obtained from FutureVuls
   ACS URL to Service	The "SSO Endpoint" obtained from FutureVuls

   
   
   
   
2. Save your settings by clicking the "Register" button.

 

TrustLogin User Settings

① When a user adds the app from My Page

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select "FutureVuls (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an administrator adds members

1. Search for and click the "FutureVuls (SAML)" app in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

 

FutureVuls User Settings After SAML Configuration

① Inviting a New User as a Password User

1. Open "Organization Settings > Members" and click "Add User".
   Note: If the login method for the user being invited is restricted to SSO, the "Add User" button will not be displayed.
2. Enter the new user's email address and send the invitation.

② Inviting a New User as an SSO User

1. Open "Organization Settings > Members" and click "Add SSO User".
2. Enter the new user's email address and send the invitation.

③ Enabling SSO Login for an Existing User

1. Open "Organization Settings > Members" and click "Add SSO User".
2. Enter the email address of the user to whom SAML SSO will be applied and send the invitation.

④ Restricting New Users/Existing Users to SSO Login Only

1. Open "Organization Settings > Security".
2. In the SSO settings, enable "Invite SSO users only". Enabling this will disable inviting password users.
   
   
   
3. Open "Organization Settings > Members" and click "Add SSO User".
4. Enter all email addresses of the users you want to restrict to SSO login, and submit.