|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
ー |
IdP-Initiated SSO |
|
|
Device Compatibility |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Default Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Default Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
|
SAML Authentication Scope |
〇 |
Enabled for all users (SAML authentication only) |
| ー |
Other: |
|
|
Notes |
None in particular |
|
|
TrustLogin Admin Page Settings Rakuraku Denshi Hozon Settings TrustLogin Admin Page Settings (Continued)
|
TrustLogin Admin Page Settings
- Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "Rakuraku Denshi Hozon (SAML)".
- Note the "Identity Provider URL" under "Identity Provider Information", and download the certificate from "Get Certificate".
Now, switch to configuring the Rakuraku Denshi Hozon side.
Do not click the "Register" button yet — open Rakuraku Denshi Hozon in a separate window.
Rakuraku Denshi Hozon Settings
- Click "Settings > Single Sign-On Settings".
-
Change "Use Single Sign-On" to "Enable", and configure the following items as shown below.
Identity Provider Login URL The Identity Provider URL you noted from TrustLogin Identity Provider Logout URL https://portal.trustlogin.com/ Identity Provider Certificate Select "Choose File" and upload the certificate obtained from TrustLogin
- Download the metadata from "Download" under "Rakuraku Denshi Hozon Metadata", then click "Update" at the end.
-
Click "Settings > User Management", then click the pencil icon (edit) in the operations column for the user for whom you want to configure SAML.
- Enter the email address registered in TrustLogin into "Single Sign-On Authenticated ID (NameID)", and click "Confirm".
Return to the TrustLogin settings again.
TrustLogin Admin Page Settings (Continued)
-
Configure the "Service Provider Settings" fields as follows.
Login URL Rakuraku Denshi Hozon login URL Metadata Metadata obtained from Rakuraku Denshi Hozon
- Click the "Register" button to save.
TrustLogin User Settings
① When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Rakuraku Denshi Hozon (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
② When an administrator adds members
- Search for and click the "Rakuraku Denshi Hozon (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.