How to Configure SAML Authentication for AgileWorks (App)

Item

Details

Pre-check

  • Pre-configuration is required in AgileWorks.

  • You must register the same email address as your TrustLogin account as the "Login ID" in AgileWorks.
  • This manual was created based on verification testing performed with the AgileWorks Cloud edition.
  • For the latest configuration steps, please refer to the manual provided by AgileWorks.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JIT Provisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other: Enabled only for users for whom SAML authentication has been applied on the SP side (you can choose to use both SAML authentication and password authentication together)

Notes

Please also refer to the following.

Please refer to the manual below for instructions on consolidating SAML settings into a single app.

Table of Contents:

TrustLogin Admin Page Settings

AgileWorks Settings

TrustLogin User Settings

Native App Login Method

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "[App] AgileWorks (SAML)".
    AgileWorks02.png

  3. Note down the value of "Identity Provider URL" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png

  4. In "Service Provider Settings > ACS URL of the Service", enter the AgileWorks URL in the format "https://xxxx.atledcloud.jp".
    AgileWorks11.png

  5. Save by clicking the "Register" button.

AgileWorks Settings

  1. Log in to the Admin Site, select "Site Management > Site Common Settings > Login Authentication > App", and click "Edit".
    AgileWorks04.png

  2. Open the "Basic" tab and select "Available" for "Usage Status".
    AgileWorks09.png


  3. Open the "SAML" tab and configure as follows.
    Redirect Authentication URL The "Identity Provider URL" noted down from TrustLogin
    Public Key Certificate File Upload the "Certificate" obtained from TrustLogin

    AgileWorks10.png

  4. Configure "Access Permissions" according to your company's operational policy.

  5. Save the settings by clicking "Save".

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "[App] AgileWorks (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "[App] AgileWorks (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Native App Login Method

  1. Log in to the User Site using a PC browser and open "Settings > App".
    AgileWorks16.png

  2. Install the native app and tap "Scan QR Code".
    AgileWorks13.png

  3. Scan the QR code for "Initial Setup" displayed in the PC browser.
    AgileWorks15.png

  4. Confirm that the AgileWorks server is entered, and tap "Connect".
    Note: If using a client certificate, tap "Select" to choose the certificate before connecting. The client certificate selection button is only available on Android devices.
    AgileWorks12.png
  5. Tap "SAML Authentication" and log in via SSO.
    AgileWorks14.png

How to Configure SAML Authentication for AgileWorks (App)

Item

Details

Pre-check

  • Pre-configuration is required in AgileWorks.

  • You must register the same email address as your TrustLogin account as the "Login ID" in AgileWorks.
  • This manual was created based on verification testing performed with the AgileWorks Cloud edition.
  • For the latest configuration steps, please refer to the manual provided by AgileWorks.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JIT Provisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other: Enabled only for users for whom SAML authentication has been applied on the SP side (you can choose to use both SAML authentication and password authentication together)

Notes

Please also refer to the following.

Please refer to the manual below for instructions on consolidating SAML settings into a single app.

Table of Contents:

TrustLogin Admin Page Settings

AgileWorks Settings

TrustLogin User Settings

Native App Login Method

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "[App] AgileWorks (SAML)".
    AgileWorks02.png

  3. Note down the value of "Identity Provider URL" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png

  4. In "Service Provider Settings > ACS URL of the Service", enter the AgileWorks URL in the format "https://xxxx.atledcloud.jp".
    AgileWorks11.png

  5. Save by clicking the "Register" button.

AgileWorks Settings

  1. Log in to the Admin Site, select "Site Management > Site Common Settings > Login Authentication > App", and click "Edit".
    AgileWorks04.png

  2. Open the "Basic" tab and select "Available" for "Usage Status".
    AgileWorks09.png


  3. Open the "SAML" tab and configure as follows.
    Redirect Authentication URL The "Identity Provider URL" noted down from TrustLogin
    Public Key Certificate File Upload the "Certificate" obtained from TrustLogin

    AgileWorks10.png

  4. Configure "Access Permissions" according to your company's operational policy.

  5. Save the settings by clicking "Save".

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "[App] AgileWorks (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "[App] AgileWorks (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Native App Login Method

  1. Log in to the User Site using a PC browser and open "Settings > App".
    AgileWorks16.png

  2. Install the native app and tap "Scan QR Code".
    AgileWorks13.png

  3. Scan the QR code for "Initial Setup" displayed in the PC browser.
    AgileWorks15.png

  4. Confirm that the AgileWorks server is entered, and tap "Connect".
    Note: If using a client certificate, tap "Select" to choose the certificate before connecting. The client certificate selection button is only available on Android devices.
    AgileWorks12.png
  5. Tap "SAML Authentication" and log in via SSO.
    AgileWorks14.png