|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
| 〇 |
Custom attribute Note: For instructions on setting up a custom attribute, see here |
|
|
SP-Side Configuration |
〇 |
Configured by the administrator |
|
Request the SP to configure this |
||
|
Provisioning |
Supports provisioning via API (account management possible in TrustLogin) |
|
|
Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not possible) |
||
|
〇 |
None (accounts are created individually in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Device Compatibility |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App Internal Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App Internal Browser |
|
|
ー |
Android - Native App |
|
|
SAML Authentication Scope |
ー |
Enabled for all users (SAML authentication only) |
| 〇 |
Other: Enabled only for members with external authentication applied on the SP side (SAML authentication only) / |
|
|
Notes |
None in particular |
|
|
Table of Contents: |
Preparation
Add a Custom Attribute to User Information
Add the EASY FILE EXPRESS "Member ID" information to the TrustLogin member information as a custom attribute.
Note: This is not necessary if the "EASY FILE EXPRESS Member ID" matches the "TrustLogin email address". Proceed to the next step.
[TrustLogin Custom Attribute Configuration Example]
Please refer to the following pages for instructions on how to configure custom attributes. The attribute name for the custom attribute can be anything you like.
Custom Attribute Setup (Individual Registration)
Custom Attribute Setup (Bulk Registration)
TrustLogin Admin Page Settings
- Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Corporate App" screen and select "EASY FILE EXPRESS (SAML)".
- Download the metadata using the "Download Metadata" button under "Identity Provider Information".
-
Configure each item in the "Service Provider Settings" as follows.
Note: The "filex" (application name) portion may have been changed. Please check your EASY FILE EXPRESS environment.Entity ID https://[Your EASY FILE EXPRESS domain]/filex Value for Name ID If the "EASY FILE EXPRESS Member ID" matches the email address registered in TrustLogin
→ Select "Member > email"
If the "EASY FILE EXPRESS Member ID" does not match the email address registered in TrustLogin
→ Select "Custom Attribute > the attribute name configured in Preparation"ACS URL to Service https://[Your EASY FILE EXPRESS domain]/filex/saml
- Save by clicking the "Register" button.
EASY FILE EXPRESS Settings
- Open "Authentication Settings", select the metadata obtained from TrustLogin using the "Choose File" button, and import it using the "Import File" button.
- Confirm that the IdP integration information has been imported successfully.
- In "Member Management", change "External Authentication" to "Enable" for the members you want to enable SAML SSO for.
To change this in bulk via CSV, please refer to the EASY FILE EXPRESS manual.
TrustLogin User Settings
① When a User Adds the App from My Page
- On "My Page", click the "Add App" button.
- On the "Register App" screen, select "EASY FILE EXPRESS (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
② When an Administrator Adds Members
- In the "Admin Page > App" menu, search for and click the "EASY FILE EXPRESS (SAML)" app.
- Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.