|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, click here |
||
|
SP Configuration |
〇 |
Configured by the administrator |
|
Request the SP to configure |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JITProvisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Device Compatibility |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Default Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Default Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
|
SAML Authentication Scope |
ー |
Enabled for all (SAML authentication only) |
| 〇 |
Other: |
|
|
Notes |
When you configure SSO in UserLocal's organization settings, SSO becomes available for "UserLocal ChatAI", "User Insight", and "Social Insight". |
|
|
Table of Contents: TrustLogin Admin Page Settings |
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "UserLocal (SAML)".
- Make a note of the "IdP URL" and "Issuer/Entity ID" values under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
Now, let's move on to the UserLocal settings.
Do not click the "Register" button yet — open UserLocal in a separate window.
UserLocal Settings
- Open "Organization Settings".
-
Check "Enable SAML Login", and configure each item as follows.
Identifier (Entity ID) The "Issuer/Entity ID" obtained from TrustLogin Reply URL The "IdP URL" obtained from TrustLogin Certificate (Base64 format) Paste the contents of the certificate obtained from TrustLogin Disable Password Authentication Do not check (recommended)
Note: Checking this box restricts the login method to SAML only. We recommend switching only after confirming a successful SAML connection and notifying your users.
-
"Identifier (Entity ID)" and "Reply URL" using the "Copy URL" button, and save by clicking the "Save" button.
Now, return to the TrustLogin Admin Page settings.
TrustLogin Admin Page Settings (Continued)
-
Configure the "Service Provider Settings" input fields as follows.
Entity ID The "Identifier (Entity ID)" obtained from UserLocal ACS URL to Service The "Reply URL" obtained from UserLocal
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "UserLocal (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
② When an administrator adds members
- Search for and click the "UserLocal (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.