Item |
Details |
|
|---|---|---|
Pre-check |
|
|
| Name ID | 〇 | Email address |
| Custom attribute Note: For how to configure custom attributes, see here | ||
| SP Configuration | Configured by the administrator | |
| 〇 | Request SP to configure | |
| Provisioning | API-based Provisioning supported (account management available in TrustLogin) | |
| 〇 | SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) | |
| None (accounts created in each system) | ||
| Access Method | 〇 | SP-Initiated SSO |
| 〇 | IdP-Initiated SSO | |
| Device Compatibility | 〇 | PC - Browser |
| 〇 | PC - Desktop App | |
| 〇 | iOS - Default Browser (Safari) | |
| 〇 | iOS - TrustLogin Mobile App In-App Browser | |
| 〇 | iOS - Native App | |
| 〇 | Android - Default Browser (Chrome) | |
| 〇 | Android - TrustLogin Mobile App In-App Browser | |
| ー |
Android - Native App |
|
| SAML Authentication Scope | ー | Enabled for all users (SAML authentication only) |
| 〇 | Enabled for all users (SAML authentication and password authentication can be used together) | |
Notes |
||
|
Table of Contents: |
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "Zight (SAML)".
- Copy and note down the "Identity Provider URL" and "Issuer / Entity ID" values under "Identity Provider Information", and download the certificate by clicking the "Get Certificate" button.
- Enter Zight's "Organization ID" in the "Entity ID" and "ACS URL" fields under "Service Provider Settings".
- Send the "Identity Provider URL", "Issuer / Entity ID", and "Certificate" you obtained to the Zight support representative and request them to configure the settings.
Zight Settings
-
Once you receive confirmation from the Zight support representative that the SSO settings are complete, log in to Zight, click the profile icon in the upper right, and go to "Team > Workspace Members > Access & SSO Settings".
Configure "New users join as view-only" and "Prevent users from using other workspaces" as desired.
Note: When a user with an email address from a domain registered in "Autojoin Domain List" logs in for the first time, a new user will be created in Zight. You can optionally register domains via "Add Autojoin Domain".
-
Open "Authentication", check "SSO (SAML2.0)", and click "Update Authentication Methods" to save.
TrustLogin User Settings
① When a user adds the app from My Page
Note: The SAML app must be configured by an administrator in advance.
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Zight (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Save" button.
② When an administrator adds members
- Search for and click the "Zight (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.
Login Method
iOS - Login Method via Native App
-
Open the Zight app and tap "Sign in with SSO".
-
Enter the email address you want to log in with and tap "Log in" to log in with SSO.