How to Configure SAML Authentication for AgileWorks (Gadget)

GMOトラスト・ログインチーム
  • Updated

 Item

Details 

Pre-check

  • Pre-configuration is required in AgileWorks.

  • You must register the same email address as your TrustLogin account for the "Login ID" in AgileWorks.
  • This manual was created based on operation verification performed using the AgileWorks cloud edition.

  • For the latest configuration steps, please refer to the manual provided by AgileWorks.

Name ID

〇

Email address
 

Custom attribute　Note: For how to configure custom attributes, see here

SP Configuration

〇

Configured by the Administrator
 

Request SP to configure

Provisioning

  

API-based Provisioning supported (Account management available in TrustLogin)
 

SAML JIT Provisioning supported (Account management available in TrustLogin; user deletion not available)

〇

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

 

IdP-Initiated SSO

Device Compatibility

〇

PC - Browser

ー

PC - Desktop App

ー

iOS - Default Browser (Safari)

ー

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

ー

Android - Default Browser (Chrome)

ー

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App

SAML Authentication Scope

ー

Enabled for all users (SAML authentication only)
〇

Other: Enabled only for users to whom the SP has applied SAML authentication (can choose to use both SAML authentication and password authentication)

Remarks

Please also refer to the following.


For steps to consolidate SAML settings into a single app, please refer to the manual below.

 

Table of Contents:

TrustLogin Admin Page Settings

AgileWorks Settings

TrustLogin User Settings

 

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "[Gadget] AgileWorks (SAML)".
    AgileWorks03.png

  3. Note down the value of the "Identity Provider URL" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png

  4. In the blank field under "Service Provider Settings > ACS URL to the Service", enter the AgileWorks URL in the format "https://xxxx.atledcloud.jp".
    AgileWorks18.png

  5. Save by clicking the "Register" button.

 

AgileWorks Settings

  1. Log in to the admin site, select "Site Management > Site Common Settings > Login Authentication > Gadget", and click "Edit".
    AgileWorks05.png

  2. Open the "Basic" tab and select "Enabled" for "Usage Status".
    AgileWorks19.png
    Note: You must configure the "URL" for each gadget on the service where the gadget will be placed (e.g., Cybozu Garoon).
    For detailed configuration steps for placing gadgets, please refer to the manuals for AgileWorks and the service where the gadget will be placed.

  3. Open the "SAML" tab and configure it as follows.
    Redirect Authentication URL The "Identity Provider URL" noted down from TrustLogin
    Public Key Certificate File Upload the "Certificate" noted down from TrustLogin

    AgileWorks20.png

  4. Configure "Screen Transition" and "Access Permissions" according to your company's operational policy.

  5. Save the settings by clicking "Save".

 

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "[Gadget] AgileWorks (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "[Gadget] AgileWorks (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

 

Was this article helpful?

Related articles

  1. ホーム
  2. SAML App Configuration
  3. How to Configure SAML Authentication for AgileWorks (Gadget)

How to Configure SAML Authentication for AgileWorks (Gadget)

GMOトラスト・ログインチーム
  • Updated

 Item

Details 

Pre-check

  • Pre-configuration is required in AgileWorks.

  • You must register the same email address as your TrustLogin account for the "Login ID" in AgileWorks.
  • This manual was created based on operation verification performed using the AgileWorks cloud edition.

  • For the latest configuration steps, please refer to the manual provided by AgileWorks.

Name ID

〇

Email address
 

Custom attribute　Note: For how to configure custom attributes, see here

SP Configuration

〇

Configured by the Administrator
 

Request SP to configure

Provisioning

  

API-based Provisioning supported (Account management available in TrustLogin)
 

SAML JIT Provisioning supported (Account management available in TrustLogin; user deletion not available)

〇

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

 

IdP-Initiated SSO

Device Compatibility

〇

PC - Browser

ー

PC - Desktop App

ー

iOS - Default Browser (Safari)

ー

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

ー

Android - Default Browser (Chrome)

ー

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App

SAML Authentication Scope

ー

Enabled for all users (SAML authentication only)
〇

Other: Enabled only for users to whom the SP has applied SAML authentication (can choose to use both SAML authentication and password authentication)

Remarks

Please also refer to the following.


For steps to consolidate SAML settings into a single app, please refer to the manual below.

 

Table of Contents:

TrustLogin Admin Page Settings

AgileWorks Settings

TrustLogin User Settings

 

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "[Gadget] AgileWorks (SAML)".
    AgileWorks03.png

  3. Note down the value of the "Identity Provider URL" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png

  4. In the blank field under "Service Provider Settings > ACS URL to the Service", enter the AgileWorks URL in the format "https://xxxx.atledcloud.jp".
    AgileWorks18.png

  5. Save by clicking the "Register" button.

 

AgileWorks Settings

  1. Log in to the admin site, select "Site Management > Site Common Settings > Login Authentication > Gadget", and click "Edit".
    AgileWorks05.png

  2. Open the "Basic" tab and select "Enabled" for "Usage Status".
    AgileWorks19.png
    Note: You must configure the "URL" for each gadget on the service where the gadget will be placed (e.g., Cybozu Garoon).
    For detailed configuration steps for placing gadgets, please refer to the manuals for AgileWorks and the service where the gadget will be placed.

  3. Open the "SAML" tab and configure it as follows.
    Redirect Authentication URL The "Identity Provider URL" noted down from TrustLogin
    Public Key Certificate File Upload the "Certificate" noted down from TrustLogin

    AgileWorks20.png

  4. Configure "Screen Transition" and "Access Permissions" according to your company's operational policy.

  5. Save the settings by clicking "Save".

 

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "[Gadget] AgileWorks (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "[Gadget] AgileWorks (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

 

Related articles