| Item | Details | |
|---|---|---|
| Pre-Check |
|
|
| Name ID | 〇 | Email address |
| Custom attribute Note: For instructions on how to configure a custom attribute, click here | ||
| SP-side Configuration | 〇 | Configured by the administrator |
| Request configuration from the SP | ||
| Provisioning | Provisioning via API supported (account management possible in TrustLogin) | |
| SAML JITprovisioning supported (account management possible in TrustLogin; user deletion not supported) | ||
| 〇 |
None (accounts are created in each system) |
|
| Access Method | 〇 | SP-Initiated SSO |
| 〇 | IdP-Initiated SSO | |
| Verified Operation by Device | 〇 | PC - Browser |
| ー | PC - Desktop App | |
| 〇 | iOS - Standard Browser (Safari) | |
| 〇 | iOS - TrustLogin Mobile App In-App Browser | |
| 〇 | iOS - Native App | |
| 〇 | Android - Standard Browser (Chrome) | |
| 〇 | Android - TrustLogin Mobile App In-App Browser | |
| 〇 | Android - Native App | |
| SAML Authentication Scope | ー | Enabled for all users (SAML authentication only) |
| 〇 |
Other: Enabled only for users to whom SAML authentication has been applied on the SP |
|
| Notes |
By completing the setup in this manual, you can establish SSO connections with the following services.
・freee Accounting (*)
SAML login is not enforced for the following services even when SAML is enabled. |
|
|
Table of Contents: TrustLogin Admin Page Settings TrustLogin Admin Page Settings (Continued) |
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "freee (SAML)".
- Download the metadata from the "Download Metadata" button under "Identity Provider Information".
Now, switch to configuring freee.
Do not click the "Register" button — open the freee Account Management screen in a separate window.
freee Settings
- Open "Business Management > Security" in the freee Account Management screen, and click "Set Up SAML SSO".
- Copy the "Entity ID" and "ACS URL" using the copy buttons on the right, then click "Upload Metadata" to upload the metadata obtained from TrustLogin.
Finally, click "Save" to save the settings.
Return to the TrustLogin Admin Page again.
Keep the freee Account Management screen page open as is.
TrustLogin Admin Page Settings (Continued)
-
Configure "Service Provider Settings" as follows.
Entity ID The "Entity ID" you copied from freee ACS URL for the Service The "ACS URL" you copied from freee
- Save by clicking the "Register" button.
- To perform the connection test in the freee settings that follow, add the administrator configuring these settings as a member of the SAML app you created.
In the "Admin Page > App" menu, search for the "freee (SAML)" app and use "Add Member" to add the administrator account.
Return to the freee Account Management screen again.
freee Settings (Continued)
- Click "Connection Test (navigate to external site)" at the bottom of the page to run the connection test.
- If the connection test succeeds, the message "Connection test succeeded." will be displayed.
Click "Enable" to activate the SAML connection.
- Open "Business Management > Members" in the freee Account Management screen, and click "Bulk Operations > Bulk Enable SAML SSO".
- Select the members for whom you want to enable SAML SSO, and click "Enable".
- A notice will be displayed. If you have no concerns about the notice, click "Enable".
- SAML SSO is now enabled, and members can log in using SAML.
TrustLogin Admin Page Settings (Optional)
- By configuring "Service Provider Settings" as follows, you can specify which product is displayed after logging in from TrustLogin.
| Transfer URL After Successful SP Authentication |
By setting the following values, you can specify which product is displayed after logging in from TrustLogin.
|
TrustLogin User Settings
① When a User Adds the App from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "freee (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it, then click the "Register" button.
② When an Administrator Adds Members
- Search for and click the "freee (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.
Native App Login Method
- Open the native app and tap "Log In".
- When the message shown in the image below appears, tap "Continue".
- Enter your TrustLogin email address and tap "Log In".