TrustLogin Admin Page Settings

1. Log in to TrustLogin here, open the "Admin Page > App" menu, and click the "Register SAML App" button in the upper right.
   
    
2. Search in the "Register Enterprise App" screen and select "Intercom (SAML)".
   
    
3. Copy and note down the "Identity Provider URL" value from "Identity Provider Information", and download the Certificate using the "Get Certificate" button.
   

Now, proceed to the Intercom settings.
Do not click the "Save" button yet; open Intercom in a separate window.
 

Intercom Settings

1. Log in to Intercom and select "Settings > Security".

   

    

2. Under "Authentication Method", configure the following settings.

   Email address and Password	Turn the toggle on Note: It is recommended to keep this on during the initial SAML configuration. Turning it off will disable password-based login.
   SAML SSO	Turn the toggle on
   Base SAML URL	Copy and note down
   Identity Provider Single Sign-On URL	Enter the "Identity Provider URL" copied from TrustLogin
   Public Certificate	Paste the contents of the "Certificate" copied from TrustLogin
   Allowed Domains	Enter the domain to allow SAML SSO authentication for, then click "Add Domain"

   

    

3. Set the displayed DNS record on your domain. Once added, click "Verify DNS Record".
   Note: DNS record configuration varies by domain registrar. Please refer to your domain registrar's help documentation. DNS record propagation can take up to 72 hours.

   

    

Return to the TrustLogin Admin Page.

 

TrustLogin Admin Page Settings (continued)

1. In "SP Configuration", enter the "Base SAML URL" noted from Intercom into both the "Entity ID" and "ACS URL" fields.

   
    

2. Click the "Save" button to save.
    
3. Add users to the SAML App.
   Note: Please add users whose email address domain is registered in Intercom's "Allowed Domains" and whose email address matches the user logged in on the Intercom side.
    

Return to the Intercom Admin Page.

Intercom Settings (continued)

1. Confirm that domain verification is complete, then turn on "Enable just-in-time provisioning" under "Provisioning Method". Configure the permissions to assign to new users created via SAML JIT in "Default team name and permissions", then click "Save".
   Note: For details on permissions, see here.

   
    

2. Click "Authenticate with Identity Provider" to test SAML SSO.
    
3. Once authentication is successful, the SAML settings will be saved.

TrustLogin User Settings

① When a user adds the app from My Page

Note: The SAML App must be configured by an Administrator in advance.

1. On "My Page", click the "Add App" button.
2. In the "Register App" screen, select "Intercom (SAML)" and click the "Next" button in the upper right.
3. If you wish to change the "Display Name", enter it and click the "Save" button.

② When an administrator adds members

1. In the "Admin Page > App" menu, search for and click the "Intercom (SAML)" app.
2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.
    

How to Log In

① Logging in via SP-initiated SSO

1. Click "Sign in with SAML SSO".
   
    
2. Enter your email address, then click "Sign in with SAML SSO".
   

② Logging in via the Mobile App

1. Tap "Sign in with SAML SSO".
   
    
2. Enter your email address and tap "Continue".