TrustLogin Admin Page Configuration

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
   
   
2. Search in the "Register Company App" screen and select "Teamgo (SAML)".
   
   
3. Copy and note down the values for "Identity Provider URL" and "Issuer/Entity ID" under "Identity Provider Information", then download the certificate by clicking the "Get Certificate" button.
   
   
4. In the "ACS URL for Service" field under "Service Provider Settings", enter the email domain name of the users for whom you want to enable SAML SSO in Teamgo.
   
   Note: Since users whose domain is set in the second row or later cannot use IdP-Initiated SSO, it is recommended to enter the domain with the most users in the first row.
   Note: Up to 5 domains can be configured if you want to allow multiple domain names. If you need to configure 6 or more domains, please contact the support desk.
   
   
5. Click the "Save" button to save.
   

Teamgo Configuration

1. Log in with your administrator account, open "Settings > Notifications > Integrations", and click "Enable" under "Single Sign-On".
   
   

2. Configure each field in "SSO Configuration Details" as follows.

   SSO Domain	Enter the email domain name of the users to be covered by SAML SSO. Note: To specify multiple domain names, separate them with ";". Example: abc.com;xyz.com
   Issuer URL	The "Issuer/Entity ID" obtained from TrustLogin
   SAML 2.0 Endpoint URL (HTTP)	The "Identity Provider URL" obtained from TrustLogin
   Public Certificate/Fingerprint	The contents of the "Certificate" obtained from TrustLogin
   Assign default groups (optional)	Specify the group to be assigned by default when a new user is added via SAML JIT.

   

   
   

3. Click the "Save" button to save.
   
   

TrustLogin User Settings

① When a user adds the app from My Page

Note: The SAML app must be configured by an administrator in advance.

1. On "My Page", click the "Add App" button.
2. On the "Register App" screen, select "Teamgo (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Save" button.

② When an administrator adds members

1. Search for the "Teamgo (SAML)" app in the "Admin Page > App" menu and click on it.
2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.
   

Login Method

① When logging in via SP-Initiated

If multiple domains are set in SSO Domain, users whose domain is set in the second row or later of "ACS URL for Service" under "Service Provider Settings" in TrustLogin must log in via SP-Initiated.

1. On the Teamgo login page, click "Login with SAML SSO".
   
   
2. Enter your email address and click "Login" to initiate SAML SSO.
   
   

② When using the auxiliary app

We also provide an auxiliary app that can click "Login with SAML SSO" / auto-fill the email address to log in, as described in the login flow in ①. Please register "[SAML Auxiliary] Teamgo" as an app to use it.

Note: The auxiliary app is designed for use on PC browsers. On mobile devices, re-authentication in TrustLogin or manual entry of the email address may be required.

Please add the app yourself as an administrator or user, following the same steps as a normal app registration.

③ When logging in with the mobile app (Pass app)

1. Tap "Login" > "Login with SAML SSO".
   　
   
2. Enter your email address and tap "Next" to initiate SAML SSO.