How to Configure SAML JIT for Whimsical

Item

Details

Pre-check

  • Prior configuration in Whimsical is required.
  • For the latest configuration steps, please refer to the manual provided by Whimsical.
Name ID Email address
Custom attribute Note: For how to configure custom attributes, see here
SP Configuration Configured by the administrator
Request configuration from SP
Provisioning API-based Provisioning supported (account management available in TrustLogin)
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
None (accounts created in each system)
Access Method SP-Initiated SSO
IdP-Initiated SSO
Device Compatibility PC - Browser
PC - Desktop App
iOS - Default Browser (Safari)
iOS - TrustLogin Mobile App In-App Browser
iOS - Native App
Android - Default Browser (Chrome)
Android - TrustLogin Mobile App In-App Browser
Android - Native App
SAML Authentication Scope Enabled for all users (SAML authentication only)
Other: Enabled for all users (SAML authentication and password authentication can be used together)

Notes

  • User first and last names are only synced at the time of initial account creation.
  • For the SSO configuration manual provided by Whimsical, see here.

Table of Contents:

TrustLogin Admin Page Configuration

Whimsical Configuration

TrustLogin Admin Page Configuration (Continued)

TrustLogin User Settings

How to Log In

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
    01.png
  2. In the "Register Enterprise App" screen, search and select "Whimsical (SAML)".
    2026-05-15_17-14-41.png
  3. Under "Identity Provider Information", click the "Download Metadata" button to download the metadata.03.png

Now proceed to the Whimsical configuration.
Do not click the "Save" button yet — open Whimsical in a separate window.

Whimsical Configuration

  1. Log in to Whimsical and click "Settings" from the workspace name in the upper left.

    Everyone-at-TrustLoginSCIMTEST-05-26-2026_12_22_PM.png

  2. Open "Security" and configure the "SAML single sign-on" section as follows, then click "Save".

    Enable SAML 2.0-based authentication Turn the toggle on
    Identity provider Other
    SAML metadata XML Click "Select file" and upload the metadata downloaded from TrustLogin
    2026-05-15_16-29-02.png

  3. On the next settings screen, configure the following.

    ACS URL Copy and note down using the copy button
    Default user role Select the role to assign to new users created via SAML JIT
    Login URL Copy and note down using the copy button if needed
    Require SAML for login
    Off
    Note: Turning this toggle on restricts login to SSO only, and login via password or other methods will no longer be available.
    If you enable SSO-only login by turning on this toggle, you must first complete SSO configuration and testing, then perform an SSO login in the same browser session where the settings were configured.
    2026-05-15_16-29-21.png

Return to the TrustLogin Admin Page.

TrustLogin Admin Page Configuration (Continued)

  1. Under "Service Provider Settings", enter the "ACS URL" copied from Whimsical into the "ACS URL" field.

    2026-05-15_17-33-41.png


  2. Click the "Save" button to save.

TrustLogin User Settings

① When a user adds the app from My Page

Note: The SAML app must be configured by an administrator in advance.

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "Whimsical (SAML)" and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name", enter the new name and click the "Save" button.

② When an administrator adds members

  1. In the "Admin Page > App" menu, search for and click the "Whimsical (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Save" button to add them.

How to Log In

① First-time Login

When an existing Whimsical user logs in via SSO for the first time, they will need to log in with their password on that first occasion only.
From the second SSO login onward, this step is not required.

  1. During the first SSO login, the following screen will be displayed. Click "Go to log in".
    2026-05-15_18-18-31.png
  2. Enter your email address and password to log in.

    2026-05-15_18-18-48.png

② How to Log in via Desktop App

Note: Before using the desktop app, please log in via SSO in a browser first.
If you have not logged in via SSO in a browser, you may be prompted to log in with a password.

  1. Open the desktop app and click "Log in with browser".2026-05-20_10-45-11.png
  2. Click "Open app".
    2026-05-20_10-53-25.png

    Note: If the following screen appears after clicking "Log in with browser", click "Log in with SSO" to log in via SSO.
    2026-05-27_12-35-53.png

How to Configure SAML JIT for Whimsical

Item

Details

Pre-check

  • Prior configuration in Whimsical is required.
  • For the latest configuration steps, please refer to the manual provided by Whimsical.
Name ID Email address
Custom attribute Note: For how to configure custom attributes, see here
SP Configuration Configured by the administrator
Request configuration from SP
Provisioning API-based Provisioning supported (account management available in TrustLogin)
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
None (accounts created in each system)
Access Method SP-Initiated SSO
IdP-Initiated SSO
Device Compatibility PC - Browser
PC - Desktop App
iOS - Default Browser (Safari)
iOS - TrustLogin Mobile App In-App Browser
iOS - Native App
Android - Default Browser (Chrome)
Android - TrustLogin Mobile App In-App Browser
Android - Native App
SAML Authentication Scope Enabled for all users (SAML authentication only)
Other: Enabled for all users (SAML authentication and password authentication can be used together)

Notes

  • User first and last names are only synced at the time of initial account creation.
  • For the SSO configuration manual provided by Whimsical, see here.

Table of Contents:

TrustLogin Admin Page Configuration

Whimsical Configuration

TrustLogin Admin Page Configuration (Continued)

TrustLogin User Settings

How to Log In

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
    01.png
  2. In the "Register Enterprise App" screen, search and select "Whimsical (SAML)".
    2026-05-15_17-14-41.png
  3. Under "Identity Provider Information", click the "Download Metadata" button to download the metadata.03.png

Now proceed to the Whimsical configuration.
Do not click the "Save" button yet — open Whimsical in a separate window.

Whimsical Configuration

  1. Log in to Whimsical and click "Settings" from the workspace name in the upper left.

    Everyone-at-TrustLoginSCIMTEST-05-26-2026_12_22_PM.png

  2. Open "Security" and configure the "SAML single sign-on" section as follows, then click "Save".

    Enable SAML 2.0-based authentication Turn the toggle on
    Identity provider Other
    SAML metadata XML Click "Select file" and upload the metadata downloaded from TrustLogin
    2026-05-15_16-29-02.png

  3. On the next settings screen, configure the following.

    ACS URL Copy and note down using the copy button
    Default user role Select the role to assign to new users created via SAML JIT
    Login URL Copy and note down using the copy button if needed
    Require SAML for login
    Off
    Note: Turning this toggle on restricts login to SSO only, and login via password or other methods will no longer be available.
    If you enable SSO-only login by turning on this toggle, you must first complete SSO configuration and testing, then perform an SSO login in the same browser session where the settings were configured.
    2026-05-15_16-29-21.png

Return to the TrustLogin Admin Page.

TrustLogin Admin Page Configuration (Continued)

  1. Under "Service Provider Settings", enter the "ACS URL" copied from Whimsical into the "ACS URL" field.

    2026-05-15_17-33-41.png


  2. Click the "Save" button to save.

TrustLogin User Settings

① When a user adds the app from My Page

Note: The SAML app must be configured by an administrator in advance.

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "Whimsical (SAML)" and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name", enter the new name and click the "Save" button.

② When an administrator adds members

  1. In the "Admin Page > App" menu, search for and click the "Whimsical (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Save" button to add them.

How to Log In

① First-time Login

When an existing Whimsical user logs in via SSO for the first time, they will need to log in with their password on that first occasion only.
From the second SSO login onward, this step is not required.

  1. During the first SSO login, the following screen will be displayed. Click "Go to log in".
    2026-05-15_18-18-31.png
  2. Enter your email address and password to log in.

    2026-05-15_18-18-48.png

② How to Log in via Desktop App

Note: Before using the desktop app, please log in via SSO in a browser first.
If you have not logged in via SSO in a browser, you may be prompted to log in with a password.

  1. Open the desktop app and click "Log in with browser".2026-05-20_10-45-11.png
  2. Click "Open app".
    2026-05-20_10-53-25.png

    Note: If the following screen appears after clicking "Log in with browser", click "Log in with SSO" to log in via SSO.
    2026-05-27_12-35-53.png