|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For instructions on how to configure a custom attribute, click here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
|
SAML Authentication Scope |
ー |
Enabled for all users (SAML authentication only) |
| 〇 |
Other: Users (SAML authentication only); Administrators (both SAML authentication and password authentication available) |
|
|
Notes |
None in particular |
|
|
Table of Contents: TrustLogin Admin Page Settings |
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "tebiki (SAML)".
- Download the metadata from the "Download Metadata" button under "Identity Provider Information".
Now, switch to configuring tebiki.
Do not click the "Register" button yet — open tebiki in a separate window.
tebiki Settings
- Log in with an administrator account, open "Organization Settings > Security", and click "Edit Security Settings".
- Configure the "Single Sign-On" settings as follows, and save them once by clicking the "Save Changes" button while leaving it set to "Disabled".
Identifier Copy and make a note of the value Reply URL Copy and make a note of the value Metadata File Select and upload the "metadata" obtained from TrustLogin
Return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Configure "Service Provider Settings" as follows.
Entity ID The "Identifier" obtained from tebiki ACS URL to Service The "Reply URL" obtained from tebiki
- Click the "Register" button to save.
TrustLogin User Settings
① When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "tebiki (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
②When an administrator adds members
- Search for and click the "tebiki (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.
tebiki Settings (Enabling SSO)
- Click "Edit Security Settings" to open the settings screen, switch Single Sign-On to "Enabled", and save it by clicking the "Save Changes" button.
- Once SSO is enabled, the tebiki login screen display will change.
Users can log in by clicking the "tebiki (SAML)" app in TrustLogin, or by clicking "Log in with Single Sign-On" on the tebiki login screen.
Privileged administrators can also log in with a password via "Log in with password authentication as a privileged administrator".