TrustLogin Admin Page Configuration

1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. On the "Enterprise App Registration" screen, search for and select "Claude (SAML)".
   
   
3. Note down the values of "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
   
   
4. Convert the extension of the downloaded certificate to ".cer".
   

Now, switch to configuring Claude.
Do not click the "Register" button yet — open Claude in a separate window.

Claude Configuration

1. Log in to Claude with an Owner or Primary Owner account and open "Organization Settings".
   Click "Organization & Access > Domains > Add or Edit Domain".
   Note: If you have already added the domain for which you want to configure SSO, proceed to step 3.

   

2. Add the domain and click "Save".

   
   

3. Click "Verify" next to the domain.

   

4. Enter the domain you want to verify and click "Continue".

   

5. Set the displayed DNS record on the domain.
   Note: The method for configuring DNS records varies by domain registrar. Please refer to your domain registrar's help documentation. It may take up to 72 hours for DNS record changes to propagate.

   

6. Once the domain is verified, the following screen will be displayed.

   

7. Return to the "Organization & Access" screen and click "SSO Setup" under "Authentication > Single Sign-On".

   

8. On the "Select your identity provider" screen, select "Custom SAML".

   

9. Set a name for the identity provider. You can use any name you like.
   Example: TrustLogin, GMO TrustLogin

   

10. On "Step 2: Create a SAML application", note down the "Assertion consumer service (ACS) URL" and "Service provider entity ID", then click "Continue".

    

11. On "Step 3: Set Identity Provider Metadata", select "Manual configuration" and configure it as follows.
    After configuring, click "Continue".

    Identity provider Single Sign-On URL	The "IdP URL" you noted down from TrustLogin
    Identity provider issuer	The "Issuer/Entity ID" you noted down from TrustLogin
    X.509 certificate	Upload the "certificate" you downloaded from TrustLogin Note: the one converted to .cer

    

12. No configuration is needed for "Step 4: Configure SAML Attributes". Click "Continue" to proceed.

    

Leaving the Claude configuration screen open, return to the TrustLogin Admin Page again.

TrustLogin Admin Page Configuration (Continued)

1. Configure "Service Provider Settings" as follows.

   Entity ID	The "Service provider entity ID" you noted down from Claude
   ACS URL for the Service	The "Assertion consumer service (ACS) URL" you noted down from Claude

   
   

2. Click the "Register" button to save.
   
3. Use "Add Member" to add and assign the currently logged-in user. Note: This will be used later for the SSO test.

Return to the Claude configuration screen again.

Claude Configuration (Continued)

1. On "Step 5: Test Single Sign-On", click "Continue to sign-In" to run the SSO connection test.

   

2. If the SSO connection test succeeds, the following screen will be displayed.
   Note: The connection test result may open in a separate browser window.

   

3. Return to the "Organization & Access" screen, select "Just-in-Time (JIT)", and click "Save".
   Note: Leave "Enable group mapping" turned off. For instructions on how to enable group mapping, please refer to here.
   
   
4. If you want to enforce SSO-only login, return to the "Organization & Access" screen and turn on the "Require SSO for Claude" toggle under "Authentication".
   Note: This setting is optional. If you turn on the toggle, we recommend doing so only after the connection has been confirmed and your organization has been notified.
   

TrustLogin User Configuration

① When a user adds the app from My Page

Note: The administrator must have configured the SAML app beforehand.

1. On "My Page", click the "Add App" button.
2. On the "App Registration" screen, select "Claude (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it, then click the "Register" button.

② When an administrator adds a member

1. In the "Admin Page > Apps" menu, search for and click the "Claude (SAML)" app.
2. Click "Add Member", select the user you want to add from the member list, and click the "Register" button to add them.
   

Login Method

① When logging in via "IdP-initiated"

When logging in via IdP-initiated, an email address confirmation screen will be displayed. Confirm the email address and click "Continue as XXXX@XXXX.com".

② When logging in via "SP-initiated"

Open the Claude login URL and enter your email address. If the email address is subject to SSO, the "Continue with SSO" button will be displayed. Click "Continue with SSO" to log in via SSO.
Note: If the "Require SSO for Claude" toggle is turned on in the Claude settings, the "Continue with email" button will not be displayed.
Note: For desktop app login as well, please log in via "Continue with SSO".

③ How to Log In via the Native App

1. Open the app and enter your email address.
   
   

2. Click "SSO" to start the SSO login.