Smooth File SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Smooth File is required.

  • Please refer to the manual provided by Smooth File for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based provisioning supported (account management available in TrustLogin)

SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other:
Enabled only for SAML-linked users of companies for which the SP has applied SAML authentication

Notes

  • Federation settings must be configured for each company on the Smooth File side.
  • SAML-linked users cannot log in by entering an ID and password from the login screen. (This is handled separately from users who log in by entering an ID and password from the login screen, including LDAP-linked users.)
  • SAML-linked users cannot be created from the user management screen. Under this specification, a new user is created upon their first login via single sign-on.
  • The login URL used when logging in via SP-Initiated SSO is
    https://[Smooth File domain]/[account parameter]/[company code]/login_sso

Table of Contents:

TrustLogin Admin Page Settings

Smooth File Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Smooth File (SAML)".
    02.png

  3. Make a note of the "Identity Provider URL" value under "Identity Provider Information", then download the certificate using the "Get Certificate" button.
    03.png

Now, switch to configuring the Smooth File side.
Do not click the "Register" button yet — open Smooth File in a separate window.

Smooth File Settings

  1. Open "System Settings > SAML Federation Settings".
    04.png

  2. Select "Register Federation".
    05.png

  3. Configure each item as follows, and finally save by clicking the "Register" button.
    Display Name Any display name you like (e.g., TrustLogin)
    IdP's SSO Endpoint URL The "Identity Provider URL" obtained from TrustLogin
    RequestedAuthnContext Attribute Select "Do not use"
    Comparison Attribute Select "minimum"
    Public Key The contents of the "Certificate" obtained from TrustLogin
    Source Attribute: Username Enter "username"
    Source Attribute: Email Address Enter "email"
    Linked Company Select the company to link from the dropdown
    Automatic User Registration Select "Use"
    Auto-registered User: Permission Group Select the permission group to assign when a new user is registered
    Auto-registered User: Allowed Login IP If restricting login by IP address, enter the allowed IP address

    06.png

  4. Check the federation you configured, then click the "Download Metadata" button to obtain the metadata.
    07.png

Now return to the TrustLogin admin page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the metadata obtained from Smooth File to "Metadata" under "Service Provider Settings".
    08.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Smooth File (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Smooth File (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Smooth File SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Smooth File is required.

  • Please refer to the manual provided by Smooth File for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based provisioning supported (account management available in TrustLogin)

SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other:
Enabled only for SAML-linked users of companies for which the SP has applied SAML authentication

Notes

  • Federation settings must be configured for each company on the Smooth File side.
  • SAML-linked users cannot log in by entering an ID and password from the login screen. (This is handled separately from users who log in by entering an ID and password from the login screen, including LDAP-linked users.)
  • SAML-linked users cannot be created from the user management screen. Under this specification, a new user is created upon their first login via single sign-on.
  • The login URL used when logging in via SP-Initiated SSO is
    https://[Smooth File domain]/[account parameter]/[company code]/login_sso

Table of Contents:

TrustLogin Admin Page Settings

Smooth File Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Smooth File (SAML)".
    02.png

  3. Make a note of the "Identity Provider URL" value under "Identity Provider Information", then download the certificate using the "Get Certificate" button.
    03.png

Now, switch to configuring the Smooth File side.
Do not click the "Register" button yet — open Smooth File in a separate window.

Smooth File Settings

  1. Open "System Settings > SAML Federation Settings".
    04.png

  2. Select "Register Federation".
    05.png

  3. Configure each item as follows, and finally save by clicking the "Register" button.
    Display Name Any display name you like (e.g., TrustLogin)
    IdP's SSO Endpoint URL The "Identity Provider URL" obtained from TrustLogin
    RequestedAuthnContext Attribute Select "Do not use"
    Comparison Attribute Select "minimum"
    Public Key The contents of the "Certificate" obtained from TrustLogin
    Source Attribute: Username Enter "username"
    Source Attribute: Email Address Enter "email"
    Linked Company Select the company to link from the dropdown
    Automatic User Registration Select "Use"
    Auto-registered User: Permission Group Select the permission group to assign when a new user is registered
    Auto-registered User: Allowed Login IP If restricting login by IP address, enter the allowed IP address

    06.png

  4. Check the federation you configured, then click the "Download Metadata" button to obtain the metadata.
    07.png

Now return to the TrustLogin admin page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the metadata obtained from Smooth File to "Metadata" under "Service Provider Settings".
    08.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Smooth File (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Smooth File (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.