How to Configure SAML Authentication for CAT

Item

Details

Pre-check

  • Pre-configuration is required in CAT.

  • The "Login ID" in CAT's user information must match your TrustLogin email address.

  • For the latest configuration steps, please refer to the manual provided by CAT.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JITProvisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other:

General users: SAML authentication only; Administrators: both SAML authentication and password authentication available

Remarks

・Mobile operation is not supported.
・Administrator users can access the dedicated login page ( https://<CAT URL>/nosaml )
 and log in using CAT's password authentication.

Table of Contents:

TrustLogin Admin Page Settings

CAT Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "CAT (SAML)".

  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".

At this point, switch to configuring CAT.
Do not click the "Register" button yet; open CAT in a separate window.

CAT Settings

  1. Open "System Settings" from the gear menu in the upper right.

  2. Click "Authentication Method Management".

  3. Click the "SAML Authentication Settings" button in the upper right.


  4. Check "Enable SAML Authentication", configure the items as follows, and finally save the settings by clicking the "Update" button.
    SP Metadata File Click the "Download" button to download the CAT metadata.
    IdP Metadata Click "Choose File" and upload the metadata obtained from TrustLogin.



  5. When registering user information under "Gear Menu > User Management", check "Use email address as Login ID" so that the email address is used as the Login ID.


Now return to the TrustLogin settings.

TrustLogin Admin Page Settings (Continued)

  1. Under "Service Provider Settings", click "Select Metadata" and upload the metadata obtained from CAT.

  2. Save by clicking the "Register" button.


    TrustLogin User Settings

    ① When a User Adds the App from My Page

    1. Click the "Add App" button on "My Page".
    2. On the "Register App" screen, select "CAT (SAML)" and click the "Next" button in the upper right of the screen.
    3. If you want to change the "Display Name", enter it and click the "Register" button.

    ② When an Administrator Adds Members

    1. Search for and click the "CAT (SAML)" app in the "Admin Page > App" menu.
    2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for CAT

Item

Details

Pre-check

  • Pre-configuration is required in CAT.

  • The "Login ID" in CAT's user information must match your TrustLogin email address.

  • For the latest configuration steps, please refer to the manual provided by CAT.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JITProvisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other:

General users: SAML authentication only; Administrators: both SAML authentication and password authentication available

Remarks

・Mobile operation is not supported.
・Administrator users can access the dedicated login page ( https://<CAT URL>/nosaml )
 and log in using CAT's password authentication.

Table of Contents:

TrustLogin Admin Page Settings

CAT Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "CAT (SAML)".

  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".

At this point, switch to configuring CAT.
Do not click the "Register" button yet; open CAT in a separate window.

CAT Settings

  1. Open "System Settings" from the gear menu in the upper right.

  2. Click "Authentication Method Management".

  3. Click the "SAML Authentication Settings" button in the upper right.


  4. Check "Enable SAML Authentication", configure the items as follows, and finally save the settings by clicking the "Update" button.
    SP Metadata File Click the "Download" button to download the CAT metadata.
    IdP Metadata Click "Choose File" and upload the metadata obtained from TrustLogin.



  5. When registering user information under "Gear Menu > User Management", check "Use email address as Login ID" so that the email address is used as the Login ID.


Now return to the TrustLogin settings.

TrustLogin Admin Page Settings (Continued)

  1. Under "Service Provider Settings", click "Select Metadata" and upload the metadata obtained from CAT.

  2. Save by clicking the "Register" button.


    TrustLogin User Settings

    ① When a User Adds the App from My Page

    1. Click the "Add App" button on "My Page".
    2. On the "Register App" screen, select "CAT (SAML)" and click the "Next" button in the upper right of the screen.
    3. If you want to change the "Display Name", enter it and click the "Register" button.

    ② When an Administrator Adds Members

    1. Search for and click the "CAT (SAML)" app in the "Admin Page > App" menu.
    2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.