Initial Setup Steps for Identity Provisioning with Envoy

GMOトラスト・ログインチーム
  • Updated

This page describes the initial setup steps for using TrustLogin as the source of identity
to perform Identity Provisioning to Envoy.

Note: For detailed instructions on operating Envoy, please refer to the documentation provided by Envoy.

Item Details
Pre-check
  • Envoy administrator privileges are required.
  • SAML configuration in Envoy is required.
Setup Flow / Manual

Note: After connecting TrustLogin and Envoy using the steps on this page,
　please proceed to configuring user synchronization.
Provisioning Target 〇 Supports user provisioning
〇 Supports group provisioning
SAML Authentication Setup Manual

Link to the SAML Manual

  • You can link the Identity Provisioning configuration created in this procedure with an existing SAML app.
    For details on SAML app configuration, please checkhere.
Notes
  • None in particular

Setup Steps

Envoy Settings

  1. Log in to Envoy with administrator privileges and click the "Employee directory" menu.

    Envoy_ID_05.png

  2. Click "Sync settings".

    Envoy_ID_06.png

  3. Click the "Edit" button under "Sync employees".

    [Envoy]_ID_16.png

  4. Copy the "Tenant URL" and "Secret Token" to your clipboard.
    Note: The token cannot be viewed again after you "Save". Please make sure you have copied it before proceeding.

    Envoy_ID_09.png


    This completes the preparation on the Envoy side. Next, configure the settings on the TrustLogin side.

TrustLogin Settings

  1. Log in to the TrustLogin Admin Page, and from the "Admin Page > Settings > Optional Features" menu,
    open "Settings" next to "Identity Provisioning".
    IDProvServiceCommon01.png

  2. Click "Add Service".
    IDプロビサービス共通02.png

  3. On the Add Service screen, search for and select "Envoy", then click the "Add" button.

    [Envoy]_ID_17.png

  4. You will be redirected to the "Identity Provisioning > Envoy" page.
    Click the "Edit" button.

    [Envoy]_ID_18.png

  5. Open "Access Settings", enter the following values for the settings items, and click "Save".

    Connection URL The value of the "Tenant URL" you copied in step 4 of Envoy Settings
    Access Token The value of the "Secret Token" you copied in step 4 of Envoy Settings

    [Envoy]_ID_19.png

  6. Click the "Connect" button in the upper right of the screen.
    未接続_IDProv.png

  7. Once the button status updates to "Connected", the initial setup is complete.
    接続済_IDProv.png

Next step: The manual for configuring user synchronization is available here

Values You Can Configure in Attribute Mapping

You can map any attribute on the TrustLogin side to any attribute on the Envoy side.
For configuration instructions, see here

Available Default Functions

Was this article helpful?
  1. ホーム
  2. Identity Provisioning - Service Settings
  3. Initial Setup Steps for Identity Provisioning with Envoy

Initial Setup Steps for Identity Provisioning with Envoy

GMOトラスト・ログインチーム
  • Updated

This page describes the initial setup steps for using TrustLogin as the source of identity
to perform Identity Provisioning to Envoy.

Note: For detailed instructions on operating Envoy, please refer to the documentation provided by Envoy.

Item Details
Pre-check
  • Envoy administrator privileges are required.
  • SAML configuration in Envoy is required.
Setup Flow / Manual

Note: After connecting TrustLogin and Envoy using the steps on this page,
　please proceed to configuring user synchronization.
Provisioning Target 〇 Supports user provisioning
〇 Supports group provisioning
SAML Authentication Setup Manual

Link to the SAML Manual

  • You can link the Identity Provisioning configuration created in this procedure with an existing SAML app.
    For details on SAML app configuration, please checkhere.
Notes
  • None in particular

Setup Steps

Envoy Settings

  1. Log in to Envoy with administrator privileges and click the "Employee directory" menu.

    Envoy_ID_05.png

  2. Click "Sync settings".

    Envoy_ID_06.png

  3. Click the "Edit" button under "Sync employees".

    [Envoy]_ID_16.png

  4. Copy the "Tenant URL" and "Secret Token" to your clipboard.
    Note: The token cannot be viewed again after you "Save". Please make sure you have copied it before proceeding.

    Envoy_ID_09.png


    This completes the preparation on the Envoy side. Next, configure the settings on the TrustLogin side.

TrustLogin Settings

  1. Log in to the TrustLogin Admin Page, and from the "Admin Page > Settings > Optional Features" menu,
    open "Settings" next to "Identity Provisioning".
    IDProvServiceCommon01.png

  2. Click "Add Service".
    IDプロビサービス共通02.png

  3. On the Add Service screen, search for and select "Envoy", then click the "Add" button.

    [Envoy]_ID_17.png

  4. You will be redirected to the "Identity Provisioning > Envoy" page.
    Click the "Edit" button.

    [Envoy]_ID_18.png

  5. Open "Access Settings", enter the following values for the settings items, and click "Save".

    Connection URL The value of the "Tenant URL" you copied in step 4 of Envoy Settings
    Access Token The value of the "Secret Token" you copied in step 4 of Envoy Settings

    [Envoy]_ID_19.png

  6. Click the "Connect" button in the upper right of the screen.
    未接続_IDProv.png

  7. Once the button status updates to "Connected", the initial setup is complete.
    接続済_IDProv.png

Next step: The manual for configuring user synchronization is available here

Values You Can Configure in Attribute Mapping

You can map any attribute on the TrustLogin side to any attribute on the Envoy side.
For configuration instructions, see here

Available Default Functions