How to Configure SAML Authentication for AKASHI

Item

Details

Prerequisites

  • Prior setup in AKASHI is required.

  • You must create an account in AKASHI using the same email address as your TrustLogin account.

  • For the latest configuration steps, please refer to the manual provided by AKASHI.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-Side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports API-based provisioning (accounts can be managed via GMO TrustLogin)

Supports SAML JIT provisioning (accounts can be managed via GMO TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button at the top right of the screen.
    01.png

  2. Search on the "Corporate App Registration" screen and select "AKASHI (SAML)".
    AKASHI_02.jpg

  3. Note down the "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information," and download the certificate from "Get Certificate."
    AKASHI_03.jpg

Now let's move on to the configuration on the AKASHI side. Please open AKASHI in a separate window.

AKASHI Configuration

  1. Log in with an AKASHI administrator account and open "Employee Settings."AKASHI__08.jpg
  2. Select the employee to link with SAML and click "Change."AKASHI_09.jpg                            
  3. In the "Edit/Configure Employee Information" screen, check "Do not log in except via authentication integration" to prevent logins other than through the SAML environment.                       Caution:                                                    Note: If you check this box, authentication will be limited to SAML authentication only, and login with an ID/password will no longer be possible. We recommend enabling this checkbox once the SAML connection has been verified and you are ready to begin operation.AKASHI_10.jpgAKASHI_11.jpg          
  4. Click "Settings" and open "System > Company Settings."
    AKASHI_04.jpg

  5. Open "SAML Integration Settings" and register the information you noted in step 3 of "TrustLogin Admin Page Configuration" above, as shown below. After registering, click the "Confirm" button.
    Configuration Name Any name (in this example, "trustlogin")
    IdP Entity ID The "Issuer/Entity ID" you noted from TrustLogin
    IdP Endpoint URL The "IdP URL" you noted from TrustLogin
    Post-Logout Redirect URL https://portal.trustlogin.com/user/
    Certificate

    Browse to the certificate file

    downloaded from TrustLogin


    AKASHI_05.jpg

  6. After clicking the Confirm button, open "SAML Integration Settings" again and note down AKASHI's "Login URL," "ACS URL," and "Metadata URL."AKASHI_06.jpg

Now let's return to the TrustLogin configuration.

TrustLogin Admin Page Configuration (Continued)

  1. Configure each item under "Service Provider Settings" as follows.
    Login URL The "Login URL" you noted from AKASHI
    Entity ID The "Metadata URL" you noted from AKASHI
    ACS URL for the Service The "ACS URL" you noted from AKASHI

    AKASHI_07.jpg

  2. Click the "Register" button to save the settings.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page."
  2. On the "App Registration" screen, select "AKASHI(SAML)" and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.
  4. Click the app on "My Page" or via the "browser extension" to confirm that login is successful.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "AKASHI(SAML)" app.
  2. Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for AKASHI

Item

Details

Prerequisites

  • Prior setup in AKASHI is required.

  • You must create an account in AKASHI using the same email address as your TrustLogin account.

  • For the latest configuration steps, please refer to the manual provided by AKASHI.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-Side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports API-based provisioning (accounts can be managed via GMO TrustLogin)

Supports SAML JIT provisioning (accounts can be managed via GMO TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button at the top right of the screen.
    01.png

  2. Search on the "Corporate App Registration" screen and select "AKASHI (SAML)".
    AKASHI_02.jpg

  3. Note down the "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information," and download the certificate from "Get Certificate."
    AKASHI_03.jpg

Now let's move on to the configuration on the AKASHI side. Please open AKASHI in a separate window.

AKASHI Configuration

  1. Log in with an AKASHI administrator account and open "Employee Settings."AKASHI__08.jpg
  2. Select the employee to link with SAML and click "Change."AKASHI_09.jpg                            
  3. In the "Edit/Configure Employee Information" screen, check "Do not log in except via authentication integration" to prevent logins other than through the SAML environment.                       Caution:                                                    Note: If you check this box, authentication will be limited to SAML authentication only, and login with an ID/password will no longer be possible. We recommend enabling this checkbox once the SAML connection has been verified and you are ready to begin operation.AKASHI_10.jpgAKASHI_11.jpg          
  4. Click "Settings" and open "System > Company Settings."
    AKASHI_04.jpg

  5. Open "SAML Integration Settings" and register the information you noted in step 3 of "TrustLogin Admin Page Configuration" above, as shown below. After registering, click the "Confirm" button.
    Configuration Name Any name (in this example, "trustlogin")
    IdP Entity ID The "Issuer/Entity ID" you noted from TrustLogin
    IdP Endpoint URL The "IdP URL" you noted from TrustLogin
    Post-Logout Redirect URL https://portal.trustlogin.com/user/
    Certificate

    Browse to the certificate file

    downloaded from TrustLogin


    AKASHI_05.jpg

  6. After clicking the Confirm button, open "SAML Integration Settings" again and note down AKASHI's "Login URL," "ACS URL," and "Metadata URL."AKASHI_06.jpg

Now let's return to the TrustLogin configuration.

TrustLogin Admin Page Configuration (Continued)

  1. Configure each item under "Service Provider Settings" as follows.
    Login URL The "Login URL" you noted from AKASHI
    Entity ID The "Metadata URL" you noted from AKASHI
    ACS URL for the Service The "ACS URL" you noted from AKASHI

    AKASHI_07.jpg

  2. Click the "Register" button to save the settings.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. Click the "Add App" button on "My Page."
  2. On the "App Registration" screen, select "AKASHI(SAML)" and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.
  4. Click the app on "My Page" or via the "browser extension" to confirm that login is successful.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "AKASHI(SAML)" app.
  2. Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.