How to Configure SAML Authentication for Pro-One

Item

Details

Pre-check

  • Pre-configuration is required in Pro-One.

  • You must create an account in Pro-One using the same email address as your TrustLogin account.

  • For the latest configuration steps, please refer to the manual provided by Pro-One.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JIT Provisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other:
Enabled for all users (both SAML authentication and password authentication available)

Notes

None

Table of Contents:

TrustLogin Admin Page Settings

Pro-One Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

Native App Login Method

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Pro-One (SAML)".

  3. Note down the values for "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png


    Now, switch to configuring Pro-One.
    Do not click the "Register" button yet — open Pro-One in a separate window.

Pro-One Settings

  1. Log in with an administrator account and click "Add IdP" under "Settings > Company Information > SSO".

  2. Configure each item as follows, then save by clicking the "Save" button.
    IdP Name Specify the IdP name (e.g., TrustLogin)
    Domain Name The domain of the email address used to log in via SSO
    Identity Provider Single Sign-On URL The "IdP URL" noted down from TrustLogin
    Identity Provider Issuer The "Issuer/Entity ID" noted down from TrustLogin
    X.509 Certificate Paste in the contents of the "Certificate" obtained from TrustLogin



  3. Note down the values for "Audience (Entity ID)" and "ACS URL" under "Provider Information".


  4. Return to the "SSO" screen and click "Enable" for "SAML Authentication".


  5. Confirm that "SAML Authentication" has been enabled.


Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Audience (Entity ID)" noted down from Pro-One
    ACS URL to the Service The "ACS URL" noted down from Pro-One



  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Pro-One (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "Pro-One (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Native App Login Method

  1. Open the native app's sign-in screen and tap the "Log in with SAML" login button.


  2. You will be redirected to the TrustLogin login screen. Once you complete authentication, login will be finished.

How to Configure SAML Authentication for Pro-One

Item

Details

Pre-check

  • Pre-configuration is required in Pro-One.

  • You must create an account in Pro-One using the same email address as your TrustLogin account.

  • For the latest configuration steps, please refer to the manual provided by Pro-One.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JIT Provisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other:
Enabled for all users (both SAML authentication and password authentication available)

Notes

None

Table of Contents:

TrustLogin Admin Page Settings

Pro-One Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

Native App Login Method

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Pro-One (SAML)".

  3. Note down the values for "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png


    Now, switch to configuring Pro-One.
    Do not click the "Register" button yet — open Pro-One in a separate window.

Pro-One Settings

  1. Log in with an administrator account and click "Add IdP" under "Settings > Company Information > SSO".

  2. Configure each item as follows, then save by clicking the "Save" button.
    IdP Name Specify the IdP name (e.g., TrustLogin)
    Domain Name The domain of the email address used to log in via SSO
    Identity Provider Single Sign-On URL The "IdP URL" noted down from TrustLogin
    Identity Provider Issuer The "Issuer/Entity ID" noted down from TrustLogin
    X.509 Certificate Paste in the contents of the "Certificate" obtained from TrustLogin



  3. Note down the values for "Audience (Entity ID)" and "ACS URL" under "Provider Information".


  4. Return to the "SSO" screen and click "Enable" for "SAML Authentication".


  5. Confirm that "SAML Authentication" has been enabled.


Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Audience (Entity ID)" noted down from Pro-One
    ACS URL to the Service The "ACS URL" noted down from Pro-One



  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Pro-One (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for and click the "Pro-One (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Native App Login Method

  1. Open the native app's sign-in screen and tap the "Log in with SAML" login button.


  2. You will be redirected to the TrustLogin login screen. Once you complete authentication, login will be finished.