Matterport SAML JIT Setup Guide

Item

Details

Prerequisites

  • Prior configuration in Matterport is required.

  • For the latest setup instructions, please refer to the manual provided by Matterport.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-Side Configuration

To be configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created individually in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other: Enabled for all users (option to use both SAML authentication and password authentication)
Note: Users added after SAML SSO is enabled will use SAML authentication only

Remarks

  • The user's first and last name are synced only when a new account is created via SAML JIT. They are not updated on subsequent logins.
  • If you are using client authentication, SAML SSO is not available in the native app.

Table of Contents:

TrustLogin Admin Page Configuration

Matterport Configuration

TrustLogin Admin Page Configuration (Continued)

TrustLogin User Configuration

How to Log In via the Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Enterprise App" screen, search for and select "Matterport (SAML)".
    02.png

  3. Download the metadata by clicking the "Download Metadata" button under "Identity Provider Information".
    03.png

Now, switch to configuring the Matterport side.
Do not click the "Register" button yet — open Matterport in a separate window.

Matterport Configuration

  1. Log in with an administrator account, and click the "Configure" button under "Settings" > "Privacy Settings" > "Single Sign-On (SSO)".
    04.png

  2. Configure each item as follows, then save by clicking the "Save Configuration" button.
    Allow SSO Only OFF (Recommended)
    Note: Turning this ON restricts login to SSO only. We recommend leaving this OFF for now and switching it on after you have verified that SSO works correctly and notified your users.
    Automatic User Provisioning ON
    Automatic Access Grant Configure this if you want to specify access permissions for new users
    Assertion Consumer Service (ACS) URL Use the "Copy" button to note down the value
    SP Entity ID Use the "Copy" button to note down the value
    Metadata Open the "metadata" obtained from TrustLogin in a text editor and paste its contents here

    05jit.png

Return to the TrustLogin Admin Page.

TrustLogin Admin Page Configuration (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "SP Entity ID" obtained from Matterport
    ACS URL for the Service The "Assertion Consumer Service (ACS) URL" obtained from Matterport

    07.png

  2. Save by clicking the "Register" button.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "Matterport (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter a new one, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "Matterport (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.

How to Log In via the Native App

  1. Open the native app's sign-in screen and click "Single Sign-On".
    mo01.PNG

  2. Enter your email address and tap the "CONTINUE" button.
    mo02.PNG

  3. You will be redirected to the TrustLogin login screen. Once you complete authentication, login will be finished.
    mo03.PNG

Matterport SAML JIT Setup Guide

Item

Details

Prerequisites

  • Prior configuration in Matterport is required.

  • For the latest setup instructions, please refer to the manual provided by Matterport.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-Side Configuration

To be configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created individually in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other: Enabled for all users (option to use both SAML authentication and password authentication)
Note: Users added after SAML SSO is enabled will use SAML authentication only

Remarks

  • The user's first and last name are synced only when a new account is created via SAML JIT. They are not updated on subsequent logins.
  • If you are using client authentication, SAML SSO is not available in the native app.

Table of Contents:

TrustLogin Admin Page Configuration

Matterport Configuration

TrustLogin Admin Page Configuration (Continued)

TrustLogin User Configuration

How to Log In via the Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Enterprise App" screen, search for and select "Matterport (SAML)".
    02.png

  3. Download the metadata by clicking the "Download Metadata" button under "Identity Provider Information".
    03.png

Now, switch to configuring the Matterport side.
Do not click the "Register" button yet — open Matterport in a separate window.

Matterport Configuration

  1. Log in with an administrator account, and click the "Configure" button under "Settings" > "Privacy Settings" > "Single Sign-On (SSO)".
    04.png

  2. Configure each item as follows, then save by clicking the "Save Configuration" button.
    Allow SSO Only OFF (Recommended)
    Note: Turning this ON restricts login to SSO only. We recommend leaving this OFF for now and switching it on after you have verified that SSO works correctly and notified your users.
    Automatic User Provisioning ON
    Automatic Access Grant Configure this if you want to specify access permissions for new users
    Assertion Consumer Service (ACS) URL Use the "Copy" button to note down the value
    SP Entity ID Use the "Copy" button to note down the value
    Metadata Open the "metadata" obtained from TrustLogin in a text editor and paste its contents here

    05jit.png

Return to the TrustLogin Admin Page.

TrustLogin Admin Page Configuration (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "SP Entity ID" obtained from Matterport
    ACS URL for the Service The "Assertion Consumer Service (ACS) URL" obtained from Matterport

    07.png

  2. Save by clicking the "Register" button.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "Matterport (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter a new one, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "Matterport (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.

How to Log In via the Native App

  1. Open the native app's sign-in screen and click "Single Sign-On".
    mo01.PNG

  2. Enter your email address and tap the "CONTINUE" button.
    mo02.PNG

  3. You will be redirected to the TrustLogin login screen. Once you complete authentication, login will be finished.
    mo03.PNG