Item	Details
Prior Confirmation	Prior configuration in Shisho Cloud is required. For the latest setup instructions, please check the manual provided by Shisho Cloud.
Name ID	〇	Email address
		Custom attribute　Note: For instructions on how to configure a custom attribute, click here
SP-side Configuration	〇	Configured by the administrator
		Request configuration from the SP
Provisioning		API-based Provisioning supported (account management available in TrustLogin)
	〇	SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
		None (accounts created in each system)
Access Method	〇	SP-Initiated SSO
	ー	IdP-Initiated SSO
Verified Operation by Device	〇	PC - Browser
	ー	PC - Desktop App
	〇	iOS - Standard Browser (Safari)
	〇	iOS - TrustLogin Mobile App In-App Browser
	ー	iOS - Native App
	〇	Android - Standard Browser (Chrome)
	〇	Android - TrustLogin Mobile App In-App Browser
	ー	Android - Native App
SAML Authentication Scope	ー	Enabled for all users (SAML authentication only)
	〇	Enabled only for users in domains where SAML authentication has been applied by the SP
Notes	If a failure occurs and login via SAML authentication becomes unavailable, you will need to contact GMO Flatt Security, Inc. and ask them to disable SAML authentication for Shisho Cloud. Once SAML authentication is disabled, the "users who also use ID/password login" specified in "1." of Shisho Cloud Settings (Continued) will be able to log in with a password.

Table of Contents: TrustLogin Admin Page Settings Shisho Cloud Settings TrustLogin Admin Page Settings (Continued) Shisho Cloud Settings (Continued) TrustLogin User Settings Login Method

TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. Search on the "Register Company App" screen and select "Shisho Cloud (SAML)".
   
   
   
3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".

Now, switch to configuring Shisho Cloud.
Do not click the "Register" button yet — open Shisho Cloud in a separate window.

Shisho Cloud Settings

1. Log in to Shisho Cloud and click "Settings" > "Single Sign-On" > "Add Single Sign-On".
   
   
   
2. Configure the following, then click "Add".

   Display Name	Any name of your choosing (e.g., TrustLogin)
   Email Domain	The domain of the email address used to log in via SSO
   Source	Select "File" and upload the metadata you saved from TrustLogin

   
   
   
   
3. After adding, click the display name you configured in step 2.
   
   
   
4. Make a note of the "Callback URL".
   

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

1. Enter the "Callback URL" you noted down from Shisho Cloud into "ACS URL to Service" under "Service Provider Settings".
   
   
   
2. Save by clicking the "Register" button.

Shisho Cloud Settings (Continued)

1. Once you have completed the steps above, share the following information with your contact at GMO Flatt Security, Inc. and request that they enable SSO.
   ・Email domain used for login
   ・Users who will also use ID/password login
   
   
2. Once the single sign-on configuration is enabled, the icon in the "Status" column will change to a green checkmark.
   
   
   

TrustLogin User Settings

① When a user adds the app from My Page

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select "Shisho Cloud (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an administrator adds members

1. Search for and click the "Shisho Cloud (SAML)" app in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Login Method

① Logging in with "Shisho Cloud (SAML)"

Launching "Shisho Cloud (SAML)" from TrustLogin's My Page or the browser extension will take you to the Shisho Cloud login screen. Enter your email address and click the "Login" button to log in.

② Using Shisho Cloud (Password Authentication App)

Registering Shisho Cloud (Password Authentication App) allows you to skip entering your email address and clicking the "Login" button, which are described in the login steps in ①.

1. Search on the "Register Company App" screen and select "Shisho Cloud".
   
   
2. Add the app using the same steps as a standard app registration, either as an administrator or by the user.
   
   
3. On the app edit screen, enter your email address in the "Username or Email Address" field and save.
   Note: Leave the password field blank when saving. If you have already registered the "Shisho Cloud" app and were using password authentication (i.e., you saved the app with a password entered), there is no need to delete it. You can continue using it as is.
   Note: The supplementary app can only be used in a PC browser.