TrustLogin Admin Page Configuration

1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. On the "Register Corporate App" screen, search and select "AI-Q(SAML)".
   
   
   
   
3. Note down the "IdP URL" and "Issuer / Entity ID" under "Identity Provider Information," and download the certificate from "Get Certificate".
   
   
   
   

Now, switch to the configuration on the AI-Q side.
Do not click the "Register" button yet — open the AI-Q admin page in a separate tab.

AI-Q Configuration

1. Log in to AI-Q with an administrator account, and from the "Main Menu," open "Environment Settings > SAML Settings".
   
   
   
   
2. ① From "Register Information to SP," click the "Register/Update" button.
   
   
   
3. Register the information you noted in step 3 of "TrustLogin Admin Page Configuration" above, as follows. After registering, click "Save".　

   Identity Provider Entity ID (entityID)	The "Issuer / Entity ID" you noted from TrustLogin
   Identity Provider Login URL (SingleSignOnService)	The "IdP URL" you noted from TrustLogin
   Identity Provider Certificate (X509Data)	Open the "certificate" you downloaded from TrustLogin and paste its contents
   Login Name Policy (NameIDFormat)	urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified

   
4. ② From "Register Information to IdP," click "Metadata (SP)" to download the metadata.　　　　　　　　　　　　　　　　　　

   Return to the TrustLogin admin page again.

TrustLogin Admin Page Configuration (Continued)

1. In "Service Provider Settings," upload the metadata you downloaded from AI-Q to "Metadata".　　　
2. Click the "Register" button.
3. In the "Admin Page > Apps" menu, search for and select the "AI-Q(SAML)" app.
4. Under "Add Member," add the user for whom you configured SAML, and click "Register".
5. Log out of TrustLogin, and return to the SAML settings on the AI-Q side again.　　　　　

AI-Q Configuration (Continued)

1. ③ Click "Communication Test to IdP," then click the "SAML Test" button. (Alternatively, note down the URL below "SAML Test" and access it while logged out.)Note: Perform the SAML test while logged out of TrustLogin.
2. You will be redirected to the TrustLogin login page. Log in to TrustLogin.
3. After confirming the message "SAML configuration is incomplete. Please configure it," log in to AI-Q using your email address and password.
4. After logging in, open "Environment Settings > SAML Settings" from the "Main Menu" again.
5. ④ Confirm that the "Register/Update" and "Delete" buttons are displayed to the right of "Configure User Management," then click "Register/Update".
6. Configure each item on the SAML settings screen as follows, then click "Save".

   ID used at login (email)	NameID (auto-filled)
   Username 1 obtained from IdP information	NameID (auto-filled)
   User's password when using SSO	Any password
   User's role when using SSO	Select Administrator or User
   Automatically create users from the IdP account	Do not create

   
7. ⑤ Click "Set Up Link," note the URL of the "SSO Login Page," then open it in a different browser and log in.

TrustLogin User Configuration

① When a User Adds the App from My Page

1. On "My Page," click the "Add App" button.
2. On the "Register App" screen, select "AI-Q(SAML)", then click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name," enter it, then click the "Register" button.
4. Click the app from "My Page" or the "Browser Extension" and check that login succeeds.

② When an Administrator Adds a Member

1. In the "Admin Page > Apps" menu, search for and click the "AI-Q(SAML)" app.
2. Click "Add Member," select the user to add from the member list, then click the "Register" button to add them.