|
Item |
Details |
|
|---|---|---|
|
Pre-Check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For instructions on how to configure a custom attribute, click here |
||
|
SP Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management possible in TrustLogin) |
|
|
SAML JIT provisioning supported (account management possible in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Device Compatibility |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
〇 |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
〇 |
Android - Native App |
|
|
SAML Authentication Scope |
ー |
Enabled for all users (SAML authentication only) |
| 〇 |
Other: Enabled for all users (users may choose to use either SAML authentication or password authentication) |
|
|
Notes |
None | |
|
Table of Contents: TrustLogin Admin Page Settings |
TrustLogin Admin Page Settings
- Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "Weekdone (SAML)".
-
Note down the value of "Identity Provider URL" under "Identity Provider Information", and download the certificate from the "Get Certificate" button.
Now switch to the Weekdone settings.
Do not click the "Register" button yet — open Weekdone in a separate window.
Weekdone Settings
- Log in with an administrator account and open "Company settings > Single-sign-on (SAML2)".
Configure each item as follows and save with the "Update" button.
SAML name Set a unique string of your choosing SAML SSO URL The "Identity Provider URL" obtained from TrustLogin SAML Logout URL https://portal.trustlogin.com/ X509 Certificate The contents of the "Certificate" obtained from TrustLogin
- On the "People & Teams" > user information edit screen, "Allow password login" lets you configure the allowed sign-in method for each user.
Note that this item only appears after a user has signed in via SAML SSO.
User is allowed to login using external accounts only SAML SSO only User is allowed to login using e-mail/password Both SAML SSO and password sign-in are allowed
Return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Under "Service Provider Settings", enter the "SAML name" you configured in Weekdone into the "Entity ID" and "ACS URL for the Service" fields.
- Click the "Register" button to save.
TrustLogin User Settings
① When a User Adds the App from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Weekdone (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it, then click the "Register" button.
② When an Administrator Adds Members
- Search for and click the "Weekdone (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.