How to Configure SAML Authentication for Genesys Cloud

Item

Details

Pre-check

  • Prior configuration in Genesys Cloud is required.
  • You must create an account in Genesys Cloud using the same email address as your TrustLogin account.
  • For the latest setup instructions, please check the manual provided by Genesys Cloud.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, click here

SP Configuration

Configured by the administrator

Request the SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JITProvisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all (SAML authentication only)

Other:
Enabled for all (both SAML authentication and password authentication can be selected)

Notes

If you disable Genesys Cloud login in Genesys Cloud, login will only be possible via SAML authentication. For details, please check the following.

Configure Genesys Cloud to authenticate using SSO only

Table of Contents:

TrustLogin Admin Page Settings

Genesys Cloud Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register SAML App" button in the upper right of the screen.
    jit01.png

  2. Set the "Application Name" and "Icon" (optional).
    Image8.png
  3. Make a note of the "IdP URL" and "Issuer/Entity ID" values under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png

  4. Change the extension of the downloaded certificate to ".pem".

Now, let's move on to the Genesys Cloud settings.
Do not click the "Register" button yet — open Genesys Cloud in a separate window.

Genesys Cloud Settings

  1. Click "Admin > Integrations > Single Sign-on".
    Image6.png

  2. Open "Generic SSO Provider", configure it as follows, and click the "Save" button.
    Provider Logo Optional
    Provider Certificate

    Upload the "Certificate" you obtained from TrustLogin

    (PEM format certificate)

    Manufacturer Name Any name (e.g., TrustLogin)
    Provider Issuer URI The "Issuer/Entity ID" you obtained from TrustLogin
    URL The "IdP URL" you obtained from TrustLogin
    Certificate Consumer ID https://login.mypurecloud.jp/saml
    Name ID Format Email address

    Image1.pngImage2.png

  3. Select "Admin > Account Settings > Organization Settings" and make a note of the organization name.
    Image7.png

Now, return to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.

    Value for Name ID Member email
    Entity ID The organization name string you obtained from Genesys Cloud
    Name ID Format unspecified
    ACS URL to Service https://login.mypurecloud.jp/saml

    Image9.png

  2. Click the "Specify Custom Attributes" button under "SAML Attribute Settings", then click the "Add SAML Attribute" button to add rows (attributes) and configure them as follows.
    Service Provider Attribute TrustLogin (IdP) Attribute
    Attribute Name Attribute Type Field Attribute Value

    OrganizationName

    Note: Optional

    Unspecified Organization Name

    Fixed value

    The organization name string you obtained from Genesys Cloud

    email Email Email address

    Member

    Member - Email address

    ServiceName

    Note: Optional

    Unspecified Post-Authentication URL

    Fixed value

    Enter the URL you want to redirect to after authentication, or enter one of the following values

    directory
    (Redirects to the Genesys Cloud Collaborate client.)
    directory-admin
    (Redirects to the Genesys Cloud Admin UI.)


    Image10.pngNote: OrganizationName and ServiceName are optional. If not needed, configure only "email".
    Note: Configure "OrganizationName" if you are using a single identity provider (TrustLogin) with multiple Genesys Cloud accounts.

  3. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select the custom SAML app you created and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an administrator adds members

  1. Search for and click the custom SAML app you created in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for Genesys Cloud

Item

Details

Pre-check

  • Prior configuration in Genesys Cloud is required.
  • You must create an account in Genesys Cloud using the same email address as your TrustLogin account.
  • For the latest setup instructions, please check the manual provided by Genesys Cloud.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, click here

SP Configuration

Configured by the administrator

Request the SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JITProvisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all (SAML authentication only)

Other:
Enabled for all (both SAML authentication and password authentication can be selected)

Notes

If you disable Genesys Cloud login in Genesys Cloud, login will only be possible via SAML authentication. For details, please check the following.

Configure Genesys Cloud to authenticate using SSO only

Table of Contents:

TrustLogin Admin Page Settings

Genesys Cloud Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register SAML App" button in the upper right of the screen.
    jit01.png

  2. Set the "Application Name" and "Icon" (optional).
    Image8.png
  3. Make a note of the "IdP URL" and "Issuer/Entity ID" values under "Identity Provider Information", and download the certificate using the "Get Certificate" button.03.png

  4. Change the extension of the downloaded certificate to ".pem".

Now, let's move on to the Genesys Cloud settings.
Do not click the "Register" button yet — open Genesys Cloud in a separate window.

Genesys Cloud Settings

  1. Click "Admin > Integrations > Single Sign-on".
    Image6.png

  2. Open "Generic SSO Provider", configure it as follows, and click the "Save" button.
    Provider Logo Optional
    Provider Certificate

    Upload the "Certificate" you obtained from TrustLogin

    (PEM format certificate)

    Manufacturer Name Any name (e.g., TrustLogin)
    Provider Issuer URI The "Issuer/Entity ID" you obtained from TrustLogin
    URL The "IdP URL" you obtained from TrustLogin
    Certificate Consumer ID https://login.mypurecloud.jp/saml
    Name ID Format Email address

    Image1.pngImage2.png

  3. Select "Admin > Account Settings > Organization Settings" and make a note of the organization name.
    Image7.png

Now, return to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.

    Value for Name ID Member email
    Entity ID The organization name string you obtained from Genesys Cloud
    Name ID Format unspecified
    ACS URL to Service https://login.mypurecloud.jp/saml

    Image9.png

  2. Click the "Specify Custom Attributes" button under "SAML Attribute Settings", then click the "Add SAML Attribute" button to add rows (attributes) and configure them as follows.
    Service Provider Attribute TrustLogin (IdP) Attribute
    Attribute Name Attribute Type Field Attribute Value

    OrganizationName

    Note: Optional

    Unspecified Organization Name

    Fixed value

    The organization name string you obtained from Genesys Cloud

    email Email Email address

    Member

    Member - Email address

    ServiceName

    Note: Optional

    Unspecified Post-Authentication URL

    Fixed value

    Enter the URL you want to redirect to after authentication, or enter one of the following values

    directory
    (Redirects to the Genesys Cloud Collaborate client.)
    directory-admin
    (Redirects to the Genesys Cloud Admin UI.)


    Image10.pngNote: OrganizationName and ServiceName are optional. If not needed, configure only "email".
    Note: Configure "OrganizationName" if you are using a single identity provider (TrustLogin) with multiple Genesys Cloud accounts.

  3. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select the custom SAML app you created and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an administrator adds members

  1. Search for and click the custom SAML app you created in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.