How to Configure SAML Authentication for Hikari Cloud SmartStudy®

Item

Details

Pre-check

  • Prior configuration in Hikari Cloud SmartStudy® is required.

  • The login ID of the enrolled user in Hikari Cloud SmartStudy® must match the TrustLogin email address.

  • For the latest configuration steps, please refer to the manual provided by Hikari Cloud SmartStudy®.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other: Enabled for all users (both SAML authentication and password authentication are available)

Notes

  • Only "enrolled users" can log in via single sign-on authentication. Administrator users are not eligible.

Table of Contents:

TrustLogin Admin Page Settings

Hikari Cloud SmartStudy® Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

Login Method

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Hikari Cloud SmartStudy® (SAML)".
    02.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".
    03.png

Now, proceed to the Hikari Cloud SmartStudy® settings.
Do not click the "Register" button yet; open the Hikari Cloud SmartStudy® admin screen in a separate window.

Hikari Cloud SmartStudy® Settings

  1. Open "Service Information" in the left menu of the admin screen and click the "Edit" button.
    04.png

  2. Set "Single Sign-On" usage to "Enabled" and click the "+" to the left of "Single Sign-On Settings".
    05.png

  3. Upload the "Metadata" obtained from TrustLogin to "Metadata XML", and use the copy buttons on the right to obtain and note down the "Entity ID" and "Response URL".
    Finally, save the settings by clicking the "OK" button.
    06.png

  4. Click "OK" on the confirmation screen.

  5. The login ID of the enrolled user must match the TrustLogin email address. If the enrolled user's login ID is set to an ID different from the TrustLogin email address, edit the login ID from the enrolled user's user management screen.
    07.png

Now, return to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "Entity ID" obtained from Hikari Cloud SmartStudy®
    ACS URL to the Service The "Response URL" obtained from Hikari Cloud SmartStudy®

    08.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "App Registration" screen, select "Hikari Cloud SmartStudy® (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "Hikari Cloud SmartStudy® (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Login Method

Click the TrustLogin app, then click the "Login" button on the page that appears to complete login.

09.png

How to Configure SAML Authentication for Hikari Cloud SmartStudy®

Item

Details

Pre-check

  • Prior configuration in Hikari Cloud SmartStudy® is required.

  • The login ID of the enrolled user in Hikari Cloud SmartStudy® must match the TrustLogin email address.

  • For the latest configuration steps, please refer to the manual provided by Hikari Cloud SmartStudy®.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other: Enabled for all users (both SAML authentication and password authentication are available)

Notes

  • Only "enrolled users" can log in via single sign-on authentication. Administrator users are not eligible.

Table of Contents:

TrustLogin Admin Page Settings

Hikari Cloud SmartStudy® Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

Login Method

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Hikari Cloud SmartStudy® (SAML)".
    02.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".
    03.png

Now, proceed to the Hikari Cloud SmartStudy® settings.
Do not click the "Register" button yet; open the Hikari Cloud SmartStudy® admin screen in a separate window.

Hikari Cloud SmartStudy® Settings

  1. Open "Service Information" in the left menu of the admin screen and click the "Edit" button.
    04.png

  2. Set "Single Sign-On" usage to "Enabled" and click the "+" to the left of "Single Sign-On Settings".
    05.png

  3. Upload the "Metadata" obtained from TrustLogin to "Metadata XML", and use the copy buttons on the right to obtain and note down the "Entity ID" and "Response URL".
    Finally, save the settings by clicking the "OK" button.
    06.png

  4. Click "OK" on the confirmation screen.

  5. The login ID of the enrolled user must match the TrustLogin email address. If the enrolled user's login ID is set to an ID different from the TrustLogin email address, edit the login ID from the enrolled user's user management screen.
    07.png

Now, return to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "Entity ID" obtained from Hikari Cloud SmartStudy®
    ACS URL to the Service The "Response URL" obtained from Hikari Cloud SmartStudy®

    08.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "App Registration" screen, select "Hikari Cloud SmartStudy® (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "Hikari Cloud SmartStudy® (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Login Method

Click the TrustLogin app, then click the "Login" button on the page that appears to complete login.

09.png