Item |
Details |
|
|---|---|---|
Pre-check |
|
|
| Name ID | 〇 | Email address |
| Custom attribute Note: For how to configure custom attributes, see here | ||
| SP Configuration | 〇 | Configured by the administrator |
| Request configuration from SP | ||
| Provisioning | API-based Provisioning supported (account management available in TrustLogin) | |
| 〇 | SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) | |
| None (accounts created in each system) | ||
| Access Method | 〇 | SP-Initiated SSO |
| 〇 | IdP-Initiated SSO | |
| Device Compatibility | 〇 | PC - Browser |
| ー | PC - Desktop App | |
| 〇 | iOS - Default Browser (Safari) | |
| 〇 | iOS - TrustLogin Mobile App In-App Browser | |
| ー | iOS - Native App | |
| 〇 | Android - Default Browser (Chrome) | |
| 〇 | Android - TrustLogin Mobile App In-App Browser | |
| ー |
Android - Native App |
|
| SAML Authentication Scope | ー | Enabled for all users (SAML authentication only) |
| 〇 | Other: Enabled for all users (SAML authentication and password authentication can be used together) | |
Notes |
|
|
|
Table of Contents: TrustLogin Admin Page Configuration |
TrustLogin Admin Page Configuration
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
- In the "Register Enterprise App" screen, search and select "Whimsical (SAML)".
- Under "Identity Provider Information", click the "Download Metadata" button to download the metadata.
Now proceed to the Whimsical configuration.
Do not click the "Save" button yet — open Whimsical in a separate window.
Whimsical Configuration
-
Log in to Whimsical and click "Settings" from the workspace name in the upper left.
-
Open "Security" and configure the "SAML single sign-on" section as follows, then click "Save".
Enable SAML 2.0-based authentication Turn the toggle on Identity provider Other SAML metadata XML Click "Select file" and upload the metadata downloaded from TrustLogin -
On the next settings screen, configure the following.
ACS URL Copy and note down using the copy button Default user role Select the role to assign to new users created via SAML JIT Login URL Copy and note down using the copy button if needed Require SAML for login OffNote: Turning this toggle on restricts login to SSO only, and login via password or other methods will no longer be available.
If you enable SSO-only login by turning on this toggle, you must first complete SSO configuration and testing, then perform an SSO login in the same browser session where the settings were configured.
Return to the TrustLogin Admin Page.
TrustLogin Admin Page Configuration (Continued)
-
Under "Service Provider Settings", enter the "ACS URL" copied from Whimsical into the "ACS URL" field.
- Click the "Save" button to save.
TrustLogin User Settings
① When a user adds the app from My Page
Note: The SAML app must be configured by an administrator in advance.
- On "My Page", click the "Add App" button.
- On the "Register App" screen, select "Whimsical (SAML)" and click the "Next" button at the top right of the screen.
- If you want to change the "Display Name", enter the new name and click the "Save" button.
② When an administrator adds members
- In the "Admin Page > App" menu, search for and click the "Whimsical (SAML)" app.
- Click "Add Member", select the users to add from the member list, and click the "Save" button to add them.
How to Log In
① First-time Login
When an existing Whimsical user logs in via SSO for the first time, they will need to log in with their password on that first occasion only.
From the second SSO login onward, this step is not required.
- During the first SSO login, the following screen will be displayed. Click "Go to log in".
-
Enter your email address and password to log in.
② How to Log in via Desktop App
Note: Before using the desktop app, please log in via SSO in a browser first.
If you have not logged in via SSO in a browser, you may be prompted to log in with a password.
- Open the desktop app and click "Log in with browser".
- Click "Open app".
Note: If the following screen appears after clicking "Log in with browser", click "Log in with SSO" to log in via SSO.