|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
TrustLogin Admin Page Settings
- Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
- On the "Register Corporate App" screen, search for and select "manage (SAML)".
- Note the "IdP URL" in the "Identity Provider Information" section, and download the certificate using the "Get Certificate" button.
Now, switch to configuring manage . Open manage in a separate window.
manage Configuration
- Log in with a user account that has access to "SSO Settings", and open "Admin App > SSO Settings" from the menu.
- Open "Administration".
- Enable "SSO Enabled/Disabled" and click "Update".
Note: If you enable this setting, users will no longer be able to log in using regular login, so please be careful.
- Click "Finish Administration Settings".
- Configure each item of the authentication settings as follows.
Sign-on URL The "IdP URL" obtained from TrustLogin Portal URL (optional) Specify the URL of the site to display after logging out of manage
Identity Provider Certificate The contents of the "certificate" obtained from TrustLogin
- After clicking the "Update" button, download the Service Provider metadata.
- Open "Authentication Linked ID List", specify the affiliation, and export the user list as a CSV.
- Open the exported CSV file, enter the corresponding user's TrustLogin email address in the "Linked ID" field, and overwrite the file.
- Open "Import CSV Data" and upload the file you created.
- Confirm that the import was completed successfully, and click the "Update" button.
Now return to the TrustLogin settings again.
TrustLogin Admin Page Settings (Continued)
-
In "Service Provider Settings", set the "Redirect URL After Successful SP Authentication" to the URL of manage,
and upload the metadata downloaded from manage to "Metadata".
- Save the configuration by clicking the "Register" button.
TrustLogin User Settings
① When a User Adds the App via My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "manage (SAML)" and click the "Next" button at the top right of the screen.
- If you want to change the "Display Name", enter it, then click the "Register" button.
- Click the app on "My Page" or in the "browser extension" and check that login succeeds.
② When an Administrator Adds Members
- Search for and click the "manage (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.