|
Item |
Details |
|
|---|---|---|
|
Prior Confirmation |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For instructions on how to configure a custom attribute, click here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
Provisioning via API supported (account management possible in TrustLogin) |
|
| 〇 |
SAML JIT provisioning supported (account management possible in TrustLogin; user deletion not supported) |
|
|
|
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
|
SAML Authentication Scope |
|
Enabled for all users (SAML authentication only) |
| 〇 |
Other: |
|
|
Notes |
|
|
|
Table of Contents: TrustLogin Admin Page Settings |
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "LearnWorlds (SAML)".
- Note down the values for "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
Now, switch to configuring LearnWorlds.
Do not click the "Register" button yet — open LearnWorlds in a separate window.
LearnWorlds Settings
- Open "Website>Website Settings>Authentication>SAML" and click "by leveraging a SAML-based authentication flow."
- Configure the following settings.
SAML Check the box Name Any name of your choice IDP Identifier (Entity ID) The "Issuer/Entity ID" noted down from TrustLogin Sign-on URL The "IdP URL" noted down from TrustLogin Single Logout URL https://portal.trustlogin.com/ Identity Provider Certificate Paste in the contents of the "Certificate" noted down from TrustLogin
- Use the copy button to note down the "Service Provider (SP) URL", "Assertion Consumer Service (ACS) URL", and "Single Logout URL". Check "Create user if email doesn't exist" under "Create User" and click "Update".
Now return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Configure "Service Provider Settings" as follows.
Entity ID The "Service Provider (SP) URL" noted down from LearnWorlds ACS URL to Service The "Assertion Consumer Service (ACS) URL" noted down from LearnWorlds Logout URL The "Single Logout URL" noted down from LearnWorlds
Note: Single logout is planned as a future feature but is not currently implemented and does not function
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "LearnWorlds (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
②When an administrator adds members
- Search for and click the "LearnWorlds (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.
LearnWorlds Settings (Continued)
Open "Website>Website Settings>Authentication>LearnWorlds" and select "Login is disabled. Only admins can login. Νο one can sign up." under "Login process". This will restrict users to logging in via SAML authentication only, and they will no longer be able to log in with a password. Configure this setting as needed.
Note: Administrators can still log in with a password.