|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based provisioning supported (account management available in TrustLogin) |
|
| 〇 |
SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported) |
|
|
|
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
ー |
iOS - Standard Browser (Safari) |
|
|
ー |
iOS - TrustLogin Mobile App In-App Browser |
|
|
〇 |
iOS - Native App |
|
|
ー |
Android - Standard Browser (Chrome) |
|
|
ー |
Android - TrustLogin Mobile App In-App Browser |
|
|
〇 |
Android - Native App |
|
|
SAML Authentication Scope |
ー |
Enabled for all users (SAML authentication only) |
| 〇 |
Other: Enabled for all users (both SAML authentication and password authentication are available) |
|
|
Notes |
None |
|
|
Table of Contents: TrustLogin Admin Page Settings |
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "ChatCo! (SAML)".
- Make a note of the "Identity Provider URL" and "Issuer/Entity ID" values under "Identity Provider Information", then download the certificate using the "Get Certificate" button.
Now, switch to configuring ChatCo!.
Do not click the "Register" button yet — open ChatCo! in a separate window.
ChatCo! Settings
- Open "SAML" from the admin screen menu.
Turn on "Enable", and configure each item as follows.
Custom Provider Any name you like Custom Entry Point The "Identity Provider URL" obtained from TrustLogin IDP SLO Redirect URL Leave blank Custom Issuer The "Issuer/Entity ID" obtained from TrustLogin Certificate > Public Certificate The contents of the "Certificate" obtained from TrustLogin
- Click the "Save Changes" button. A password confirmation screen will appear — enter your password.
- Under "SAML > General > User Interface", you can customize the "SAML" button on the login screen.
- You do not need to change the default settings under "SAML > General > Behavior".
Immutable Field Name Do not change this from the default "Email".
Doing so will prevent SAML login from working.Overwrite User's Full Name TrustLogin does not have a full name attribute, so this is not configured. As a result, turning this ON will not overwrite the name.
When a new user is created, the part of the email address before the "@" is used as the name.Logout Behavior Since TrustLogin does not currently support single logout, you will not be logged out of TrustLogin even if "End SAML Session" is selected. Default User Role You can specify the role to assign to users when a new user is created via SAML JIT.
Now return to the TrustLogin admin page again.
TrustLogin Admin Page Settings (Continued)
- Configure the fields in "Service Provider Settings" as follows (the parts shown in red).
Entity ID https://[Your ChatCo! domain]/_saml/metadata/[Custom provider name configured in ChatCo!] ACS URL to Service https://[Your ChatCo! domain]/_saml/validate/[Custom provider name configured in ChatCo!]
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "ChatCo! (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
②When an administrator adds members
- Search for and click the "ChatCo! (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.