How to Configure SAML Authentication for NAVI Express

Item Details
Pre-check
  • Prior configuration in NAVI Express is required.
  • You must create an account in NAVI Express using the same email address as TrustLogin.
  • For the latest configuration steps, please refer to the manual provided by NAVI Express.
Name ID Email address
Custom attribute Note: For how to configure a custom attribute, see here
SP Configuration Configured by the Administrator
Request SP to configure
Provisioning API-based Provisioning supported (account management available in TrustLogin)
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
None (accounts created in each system)
Access Method SP-Initiated SSO
IdP-Initiated SSO
Device Compatibility PC - Browser
PC - Desktop App
iOS - Default Browser (Safari)
iOS - TrustLogin Mobile App In-App Browser
iOS - Native App
Android - Default Browser (Chrome)
Android - TrustLogin Mobile App In-App Browser
Android - Native App
SAML Authentication Scope Enabled for all users (SAML authentication only)
Enabled only for users (IP addresses) for which SAML authentication has been applied on the SP side
Notes NAVI Express SAML authenticates based on the source IP address of the connection. If you connect from an IP address other than the one configured, SAML login will not occur.

Table of Contents:

TrustLogin Admin Page Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings


TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    Note: If you are using the "SSO Pro + SaaS Management Plan" or "SSO Free + SaaS Management Plan", select "Register SSO App" instead.
    01.png
  2. Search in the "Register Company App" screen and select "NAVI Express (SAML)".
    ナビエクスプレス01.png
  3. Download the "Metadata" from "Identity Provider Information", and note down the values of "Identity Provider URL" and "Issuer/Entity ID".
    2025-12-10_18-32-42.png

  4. Send the obtained "Metadata", "Identity Provider URL", and "Issuer/Entity ID", along with the IP address, to your contact at NTT DOCOMO Business X Corporation, and request them to configure the settings.
  5. Click the "Register" button to save.

TrustLogin Admin Page Settings (Continued)

  1. Once you receive notification of configuration completion and the SSO information from your contact at NTT DOCOMO Business X Corporation, open "Change SAML App Settings" for the "NAVI Express (SAML)" app on the TrustLogin app management screen.
    ナビエクスプレス.png
  2. Configure the "Service Provider Settings" as follows.

    Entity ID NAVI Express's "Entity ID"
    ACS URL for Service NAVI Express's "ACS URL"

    ナビエクスプレス02.png

  3. Click the "Register" button to save.

TrustLogin User Settings

① When a User Adds the App from My Page

Note: The SAML app must be configured by an administrator in advance.

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "NAVI Express (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for the "NAVI Express (SAML)" app in the "Admin Page > App" menu and click on it.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for NAVI Express

Item Details
Pre-check
  • Prior configuration in NAVI Express is required.
  • You must create an account in NAVI Express using the same email address as TrustLogin.
  • For the latest configuration steps, please refer to the manual provided by NAVI Express.
Name ID Email address
Custom attribute Note: For how to configure a custom attribute, see here
SP Configuration Configured by the Administrator
Request SP to configure
Provisioning API-based Provisioning supported (account management available in TrustLogin)
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
None (accounts created in each system)
Access Method SP-Initiated SSO
IdP-Initiated SSO
Device Compatibility PC - Browser
PC - Desktop App
iOS - Default Browser (Safari)
iOS - TrustLogin Mobile App In-App Browser
iOS - Native App
Android - Default Browser (Chrome)
Android - TrustLogin Mobile App In-App Browser
Android - Native App
SAML Authentication Scope Enabled for all users (SAML authentication only)
Enabled only for users (IP addresses) for which SAML authentication has been applied on the SP side
Notes NAVI Express SAML authenticates based on the source IP address of the connection. If you connect from an IP address other than the one configured, SAML login will not occur.

Table of Contents:

TrustLogin Admin Page Settings

TrustLogin Admin Page Settings (Continued)

TrustLogin User Settings


TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    Note: If you are using the "SSO Pro + SaaS Management Plan" or "SSO Free + SaaS Management Plan", select "Register SSO App" instead.
    01.png
  2. Search in the "Register Company App" screen and select "NAVI Express (SAML)".
    ナビエクスプレス01.png
  3. Download the "Metadata" from "Identity Provider Information", and note down the values of "Identity Provider URL" and "Issuer/Entity ID".
    2025-12-10_18-32-42.png

  4. Send the obtained "Metadata", "Identity Provider URL", and "Issuer/Entity ID", along with the IP address, to your contact at NTT DOCOMO Business X Corporation, and request them to configure the settings.
  5. Click the "Register" button to save.

TrustLogin Admin Page Settings (Continued)

  1. Once you receive notification of configuration completion and the SSO information from your contact at NTT DOCOMO Business X Corporation, open "Change SAML App Settings" for the "NAVI Express (SAML)" app on the TrustLogin app management screen.
    ナビエクスプレス.png
  2. Configure the "Service Provider Settings" as follows.

    Entity ID NAVI Express's "Entity ID"
    ACS URL for Service NAVI Express's "ACS URL"

    ナビエクスプレス02.png

  3. Click the "Register" button to save.

TrustLogin User Settings

① When a User Adds the App from My Page

Note: The SAML app must be configured by an administrator in advance.

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "NAVI Express (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. Search for the "NAVI Express (SAML)" app in the "Admin Page > App" menu and click on it.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.