Initial Setup Steps for Identity Provisioning with MongoDB

GMOトラスト・ログインチーム
  • Updated

This page describes the initial setup steps for using TrustLogin as the source of identity
to perform Identity Provisioning to MongoDB.

Note: For detailed instructions on operating MongoDB, please refer to the manual provided by MongoDB.

Item Details
Pre-check
  • MongoDB administrator privileges are required.
Setup Flow / Manual

Note: After connecting TrustLogin and MongoDB using the steps on this page,
please proceed to configuring user synchronization.
Provisioning Target 〇 Supports user provisioning
〇 Supports group provisioning
SAML Authentication Setup Manual
  • How to Configure SAML JIT for MongoDB
  • To prevent conflicts in user attribute updates caused by using the Identity Provisioning feature together with SAML JIT,
    we recommend not configuring the "SAML Attribute Settings" for duplicate user attributes when creating a SAML app.
    Note: Behavior depends on each service’s specifications, so please check with each SP for details.
Notes
  • None in particular

 

Setup Steps

MongoDB Settings

  1. Log in to MongoDB with administrator privileges.
    Click "Application" from the MongoDB icon.
     mongo_ID_01.png
     
  2. Click "Add New > Service Account".
    mongo_ID_02.png
     

  3. On the service account creation screen, configure the following settings, then click "Create".

    Name Set any name of your choice
    Description Set any description of your choice
    Client Secret Expiration Select any token expiration period of your choice
    Organization Permissions

    Select the following:

    • Organization Owner
    • Organization Member
    • Organization Billing Admin
    • Organization Project Creator

    mongo_ID_03.png
     

  4. Make a copy of the values that are displayed. (These will be used in the TrustLogin settings.)
    The token cannot be displayed again. Please make sure not to miss copying it.

    • Client ID
    • Client Secret

    mongo_ID_04.png
     

  5. Click "Organization Settings" at the bottom left of the screen, and copy the "Organization ID" that is displayed.
    mongo_ID_05.png


    This completes the preparation on the MongoDB side. Next, configure the settings on the TrustLogin side.
     

TrustLogin Settings

  1. Log in to the TrustLogin Admin Page, and from the "Admin Page > Settings > Optional Features" menu,
    open "Settings" to the right of "Identity Provisioning".
    IDProvServiceCommon01.png
     

  2. Click "Add Service".
    IDProvServiceCommon02.png
     
     
  3. On the Add Service screen, search for and select "MongoDB", then click the "Add" button.
    IDProvServiceCommon03.png
     
  4. You will be redirected to the "Identity Provisioning > MongoDB" page.
    Click the "Edit" button.
    IDProvServiceCommon04.png

     

  5. Open "Access Settings", enter the following values for the settings items, and click "Save".

    Organization ID MongoDB Settings The value of "Organization ID" you copied in Step 5
    Client ID MongoDB Settings The value of "Client ID" you copied in Step 4
    Client Secret MongoDB Settings The value of "Client Secret" you copied in Step 4

    zen_IDProv_02.png
     
     

  6. Click the "Connect" button in the upper right of the screen.
    zen_IDProv_03.png
     

     

  7. Once the button status updates to "Connected", the initial setup is complete.
    Connected_IDProv.png
     

Next step: The manual for configuring user synchronization is available here

 

Values You Can Configure in Attribute Mapping

The values that can be specified as default functions for MongoDB are as follows.

Value Description
Full Name This is the full name with the surname first.
Full Name with Given Name First This is the full name with the given name first.
Username from Email Retrieves the part of the email before the "@" and limits it to a maximum of 21 characters.
Username from Email (Special Characters Removed) Generates a username from the user’s email address.
Extracts the local part and removes invalid characters (only letters, digits, and underscores (_) are allowed).

Note: For an overview and configuration instructions for the attribute mapping feature, please see here.

 


 

 

 

 

 

 

 

 

 

 

Was this article helpful?

Related articles

  1. ホーム
  2. Identity Provisioning - Service Settings
  3. Initial Setup Steps for Identity Provisioning with MongoDB

Initial Setup Steps for Identity Provisioning with MongoDB

GMOトラスト・ログインチーム
  • Updated

This page describes the initial setup steps for using TrustLogin as the source of identity
to perform Identity Provisioning to MongoDB.

Note: For detailed instructions on operating MongoDB, please refer to the manual provided by MongoDB.

Item Details
Pre-check
  • MongoDB administrator privileges are required.
Setup Flow / Manual

Note: After connecting TrustLogin and MongoDB using the steps on this page,
please proceed to configuring user synchronization.
Provisioning Target 〇 Supports user provisioning
〇 Supports group provisioning
SAML Authentication Setup Manual
  • How to Configure SAML JIT for MongoDB
  • To prevent conflicts in user attribute updates caused by using the Identity Provisioning feature together with SAML JIT,
    we recommend not configuring the "SAML Attribute Settings" for duplicate user attributes when creating a SAML app.
    Note: Behavior depends on each service’s specifications, so please check with each SP for details.
Notes
  • None in particular

 

Setup Steps

MongoDB Settings

  1. Log in to MongoDB with administrator privileges.
    Click "Application" from the MongoDB icon.
     mongo_ID_01.png
     
  2. Click "Add New > Service Account".
    mongo_ID_02.png
     

  3. On the service account creation screen, configure the following settings, then click "Create".

    Name Set any name of your choice
    Description Set any description of your choice
    Client Secret Expiration Select any token expiration period of your choice
    Organization Permissions

    Select the following:

    • Organization Owner
    • Organization Member
    • Organization Billing Admin
    • Organization Project Creator

    mongo_ID_03.png
     

  4. Make a copy of the values that are displayed. (These will be used in the TrustLogin settings.)
    The token cannot be displayed again. Please make sure not to miss copying it.

    • Client ID
    • Client Secret

    mongo_ID_04.png
     

  5. Click "Organization Settings" at the bottom left of the screen, and copy the "Organization ID" that is displayed.
    mongo_ID_05.png


    This completes the preparation on the MongoDB side. Next, configure the settings on the TrustLogin side.
     

TrustLogin Settings

  1. Log in to the TrustLogin Admin Page, and from the "Admin Page > Settings > Optional Features" menu,
    open "Settings" to the right of "Identity Provisioning".
    IDProvServiceCommon01.png
     

  2. Click "Add Service".
    IDProvServiceCommon02.png
     
     
  3. On the Add Service screen, search for and select "MongoDB", then click the "Add" button.
    IDProvServiceCommon03.png
     
  4. You will be redirected to the "Identity Provisioning > MongoDB" page.
    Click the "Edit" button.
    IDProvServiceCommon04.png

     

  5. Open "Access Settings", enter the following values for the settings items, and click "Save".

    Organization ID MongoDB Settings The value of "Organization ID" you copied in Step 5
    Client ID MongoDB Settings The value of "Client ID" you copied in Step 4
    Client Secret MongoDB Settings The value of "Client Secret" you copied in Step 4

    zen_IDProv_02.png
     
     

  6. Click the "Connect" button in the upper right of the screen.
    zen_IDProv_03.png
     

     

  7. Once the button status updates to "Connected", the initial setup is complete.
    Connected_IDProv.png
     

Next step: The manual for configuring user synchronization is available here

 

Values You Can Configure in Attribute Mapping

The values that can be specified as default functions for MongoDB are as follows.

Value Description
Full Name This is the full name with the surname first.
Full Name with Given Name First This is the full name with the given name first.
Username from Email Retrieves the part of the email before the "@" and limits it to a maximum of 21 characters.
Username from Email (Special Characters Removed) Generates a username from the user’s email address.
Extracts the local part and removes invalid characters (only letters, digits, and underscores (_) are allowed).

Note: For an overview and configuration instructions for the attribute mapping feature, please see here.

 


 

 

 

 

 

 

 

 

 

 

Related articles