How to Configure SAML Authentication for Mackerel

Item

Details

Pre-check

  • Pre-configuration is required in Mackerel.

  • You must create an account in Mackerel using the same email address as your TrustLogin account.

  • For the latest configuration steps, please refer to the manual provided by Mackerel.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JITProvisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)
Note: For configuration steps when using provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other: Enabled for all users (both SAML authentication and password authentication can be used together)
Note: By using the external collaborator feature, you can enforce SAML authentication while also allowing exceptions for specific users to log in without SAML authentication. For details, see here

Notes

None in particular

Table of Contents:

TrustLogin Admin Page Settings

Mackerel Settings

TrustLogin User Settings

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png


  2. Search on the "Register Company App" screen and select "Mackerel (SAML)".
    02.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".
    03.png

  4. Save by clicking the "Register" button.

Mackerel Settings

  1. Log in with an administrator account, click the account display in the upper right, and open "Organization Group Settings."
    05.png

  2. Click the target organization group.
    06.png

  3. Configure each item as follows, then save by clicking the "Update" button at the end.
    IdP Metadata XML

    Upload the metadata obtained from TrustLogin.
    Once it loads successfully, the values for "IdP Entity ID," "Single Sign On URL," and "IdP X509 Certificate" will be filled in automatically.

    Enforce SAML Authentication You can restrict the login method to SAML authentication only.
    We recommend leaving this OFF during the initial SAML setup, and turning it ON after you have verified that SAML SSO works correctly and notified your users.
    Add Users as Viewers by Default OFF

    07.png

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page."
  2. On the "Register App" screen, select "Mackerel (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "Mackerel (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for Mackerel

Item

Details

Pre-check

  • Pre-configuration is required in Mackerel.

  • You must create an account in Mackerel using the same email address as your TrustLogin account.

  • For the latest configuration steps, please refer to the manual provided by Mackerel.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JITProvisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)
Note: For configuration steps when using provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other: Enabled for all users (both SAML authentication and password authentication can be used together)
Note: By using the external collaborator feature, you can enforce SAML authentication while also allowing exceptions for specific users to log in without SAML authentication. For details, see here

Notes

None in particular

Table of Contents:

TrustLogin Admin Page Settings

Mackerel Settings

TrustLogin User Settings

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png


  2. Search on the "Register Company App" screen and select "Mackerel (SAML)".
    02.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".
    03.png

  4. Save by clicking the "Register" button.

Mackerel Settings

  1. Log in with an administrator account, click the account display in the upper right, and open "Organization Group Settings."
    05.png

  2. Click the target organization group.
    06.png

  3. Configure each item as follows, then save by clicking the "Update" button at the end.
    IdP Metadata XML

    Upload the metadata obtained from TrustLogin.
    Once it loads successfully, the values for "IdP Entity ID," "Single Sign On URL," and "IdP X509 Certificate" will be filled in automatically.

    Enforce SAML Authentication You can restrict the login method to SAML authentication only.
    We recommend leaving this OFF during the initial SAML setup, and turning it ON after you have verified that SAML SSO works correctly and notified your users.
    Add Users as Viewers by Default OFF

    07.png

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page."
  2. On the "Register App" screen, select "Mackerel (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "Mackerel (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.