Automox SAML JIT Setup Guide

Item

Details

Prior Confirmation

  • Prior configuration in Automox is required.

  • For the latest setup instructions, please check the manual provided by Automox.

Name ID

Email address

Custom attribute Note: For instructions on how to configure a custom attribute, click here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other:

Notes

  • Users newly created via SAML JIT are assigned the "Read Only" role. To assign a different role, you will need to update the user information in the admin console.
  • The user's first and last name are synced only when a new user is created via SAML JIT. They are not synced on subsequent logins.
  • Users removed from the Zone's user list cannot be re-added via SAML JIT. They must be re-invited from the admin console.

Table of Contents:

TrustLogin Admin Page Settings

Automox Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Automox (SAML)".
    02.png

  3. Note down the values for "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

Now, switch to configuring Automox.
Do not click the "Register" button yet — open Automox in a separate window.

Automox Settings

  1. Log in with an administrator account and open "Security" from the menu in the upper right.
    04.png

  2. Click "SAML" > "ENABLE" and complete two-factor authentication.
    05.png

  3. Configure each item as follows, then save by clicking "SAVE CONFIGURATION" at the end.
    Enable SAML for users of the zone Turn ON
    Automox ACS URL Note down the value using the copy button on the right
    Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    x509 The contents of the "Certificate" obtained from TrustLogin
    Login URL The "IdP URL" obtained from TrustLogin
    (Optional) Provision New users Check the box

    06jit.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Enter the "Automox ACS URL" obtained from Automox into "ACS URL to Service" under "Service Provider Settings".
    07.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Automox (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Automox (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Automox SAML JIT Setup Guide

Item

Details

Prior Confirmation

  • Prior configuration in Automox is required.

  • For the latest setup instructions, please check the manual provided by Automox.

Name ID

Email address

Custom attribute Note: For instructions on how to configure a custom attribute, click here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other:

Notes

  • Users newly created via SAML JIT are assigned the "Read Only" role. To assign a different role, you will need to update the user information in the admin console.
  • The user's first and last name are synced only when a new user is created via SAML JIT. They are not synced on subsequent logins.
  • Users removed from the Zone's user list cannot be re-added via SAML JIT. They must be re-invited from the admin console.

Table of Contents:

TrustLogin Admin Page Settings

Automox Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Automox (SAML)".
    02.png

  3. Note down the values for "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

Now, switch to configuring Automox.
Do not click the "Register" button yet — open Automox in a separate window.

Automox Settings

  1. Log in with an administrator account and open "Security" from the menu in the upper right.
    04.png

  2. Click "SAML" > "ENABLE" and complete two-factor authentication.
    05.png

  3. Configure each item as follows, then save by clicking "SAVE CONFIGURATION" at the end.
    Enable SAML for users of the zone Turn ON
    Automox ACS URL Note down the value using the copy button on the right
    Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    x509 The contents of the "Certificate" obtained from TrustLogin
    Login URL The "IdP URL" obtained from TrustLogin
    (Optional) Provision New users Check the box

    06jit.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Enter the "Automox ACS URL" obtained from Automox into "ACS URL to Service" under "Service Provider Settings".
    07.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Automox (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Automox (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.