Item	Details
Pre-check	Pre-configuration is required in TUNAG. You must create an account in TUNAG using the same email address as your TrustLogin account. For the latest configuration steps, please refer to the manual provided by TUNAG.
Name ID	〇	Email address
		Custom attribute　Note: For how to configure custom attributes, see here
SP Configuration	〇	Configured by the Administrator
		Request SP to configure
Provisioning		API-based Provisioning supported (Account management available in TrustLogin)
		SAML JIT Provisioning supported (Account management available in TrustLogin; user deletion not available)
	〇	None (accounts created in each system)
Access Method	〇	SP-Initiated SSO
	〇	IdP-Initiated SSO
Device Compatibility	〇	PC - Browser
	ー	PC - Desktop App
	ー	iOS - Default Browser (Safari)
	ー	iOS - TrustLogin Mobile App In-App Browser
	〇	iOS - Native App
	ー	Android - Default Browser (Chrome)
	ー	Android - TrustLogin Mobile App In-App Browser
	〇	Android - Native App
SAML Authentication Scope	ー	Enabled for all users (SAML authentication only)
	〇	Other: You can choose "Enabled for all users" or "Enabled for specified users only" You can choose to use both SAML authentication and password authentication together
Notes	None

 

Table of Contents: TrustLogin Admin Page Settings TUNAG Settings TrustLogin Admin Page Settings (Continued) TUNAG Settings (Continued) TrustLogin User Settings Native App Login Method

 

TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. Search on the "Register Company App" screen and select "TUNAG (SAML)".
   
   

3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".

   
   Now, switch to configuring TUNAG.
   Do not click the "Register" button yet — open TUNAG in a separate window.
   
   

TUNAG Settings

1. Log in to TUNAG with an administrator account. Hover over the profile icon in the header to display the menu, then click "TUNAG Admin Screen".
   
   
2. Click "Company Information > SSO Settings" in the side menu.
   
   
3. Note down the "Entity ID" and "ACS Target URL" shown in "SSO Settings" using the copy buttons on the right.
   
   
4. Click "Register" under "IdP Information".
   
   
5. Enter your company's domain (e.g., globalsign.com) in "Company Domain", and upload the metadata obtained from TrustLogin using "Select File" in the "IdP Metadata" field.
   After uploading the metadata, delete the value in "SLO Target URL" and click "Register".
   
   
   
6. SSO Settings: check "Enable only for specified users" and click "Update".
   
   
7. Click "User > User List" in the side menu.
   
   
   
8. For the user who will verify SSO operation, click "Edit".
   
   
9. Scroll to the bottom of the screen, check "Include in SSO test login", and click "Update".
   

Now return to the TrustLogin Admin Page again.

Leave the TUNAG Admin Screen open as is.

TrustLogin Admin Page Settings (Continued)

1. Configure "Service Provider Settings" as follows.

   Entity ID	The "Entity ID" noted down from TUNAG
   ACS URL to the Service	The "ACS Target URL" noted down from TUNAG

   
   
   
   
2. Save by clicking the "Register" button.
   
   
   Now return to the TUNAG Admin Screen again.
   
   

TUNAG Settings (Continued)

1. Confirm that SSO login succeeds for the user who is the target of the test login.

2. After completing verification, click "Company Information > SSO Settings" in the side menu, configure "SSO Settings" to match your operational needs by referring to the table below, and click "Update".
   

   Item	Behavior When Enabled
   Enable for all users	Enables SSO; all users switch to SSO except those for whom an individual login method has been configured.
   Enable only for specified users	Enables SSO only for users who have "Include in SSO test login" checked on the user edit screen in the admin screen.
   Allow password authentication	You can allow password authentication to be used together on a per-user basis. To allow password authentication, configure it from the user edit screen in the admin screen.

   
   Note: If SSO does not work from the mobile app due to MDM restrictions or use of TrustLogin client authentication, enable the following.
   ・External authentication in Safari (iOS)
   ・External authentication in Chrome (Android)
   
   
   Note: If allowing password authentication
   On the user edit screen, select "Password Authentication" for "Authentication Method" and click "Update".
   
   
   
   

TrustLogin User Settings

① When a User Adds the App from My Page

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select "TUNAG (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

1. Search for and click the "TUNAG (SAML)" app in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

 

Native App Login Method

1. 1. Open the native app, enter your TrustLogin email address, and tap "Log In".
      
      
      
   2. When the TrustLogin login screen appears, enter your "Company ID," "Email Address," and "Password," and tap "Log In".
      Note: Users for whom password authentication is allowed will authenticate using a password.