| Item | Details | |
|---|---|---|
| Prerequisites |
|
|
| Name ID | 〇 | Email address |
| Custom attribute Note: For instructions on configuring custom attributes, see here | ||
| SP-side Configuration | 〇 | Configured by the administrator |
| Request configuration from the SP | ||
| Provisioning | Supports provisioning via API (account management possible in TrustLogin) | |
| Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported) | ||
| 〇 |
None (accounts are created in each system) |
|
| Access Method | 〇 | SP-Initiated SSO |
| ー | IdP-Initiated SSO | |
| Verified Operation Status by Device | 〇 | PC - Browser |
| ー | PC - Desktop App | |
| ※ | iOS - Default Browser (Safari) | |
| ※ | iOS - TrustLogin Mobile App In-App Browser | |
| ※ | iOS - Native App | |
| ※ | Android - Default Browser (Chrome) | |
| ※ | Android - TrustLogin Mobile App In-App Browser | |
| ※ | Android - Native App | |
| SAML Authentication Scope | ー | Enabled for all users (SAML authentication only) |
| 〇 | Enabled for all users (both SAML authentication and password authentication available) | |
| Remarks |
|
|
|
Table of Contents: TrustLogin Admin Page Configuration |
TrustLogin Admin Page Configuration
-
Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Corporate App Registration" screen and select "desknet's NEO PC Version (SAML)".
- Note down the "IdP URL" and "Issuer/Entity ID" from "Identity Provider Information", and download the certificate from "Get Certificate".
Now, let's move on to the configuration on the desknet's NEO side. Please open desknet's NEO in a separate window.
desknet's NEO Configuration
- Log in as the system administrator, and open the edit screen from "Do Not Use" under "SAML Authentication Integration Settings (Main Version)".
-
Change "SAML Authentication Integration" to "Use", and register the information you noted in step 3 of "TrustLogin Admin Page Configuration" above, as follows.
Access URL to NEO Enter the access URL for desknet's NEO up through "dneo"
Example access URL: https://servername.domain.com/cgi-bin/dneo/dneo.cgiAccess URL The "IdP URL" you noted from TrustLogin SP Entity ID The "Issuer/Entity ID" you noted from TrustLogin X.509 Certificate The certificate you downloaded from TrustLogin
- Click "Change" to complete the registration. Note down the "Access URL to NEO" on the SAML authentication settings screen that reappears.
Now, return to the TrustLogin Admin Page.
TrustLogin Admin Page Configuration (Continued)
-
Enter the following in "Service Provider Settings".
Login URL The "Access URL to NEO" you noted in step 3 of "desknet's NEO Configuration" above
Example: https://(server IP address or hostname)/cgi-bin/dneo/zsaml.cgiEntity ID Up to the domain name portion of the access URL
Example: http://(server IP address or hostname)ACS URL for the Service The "Access URL to NEO" you noted in step 3 of "desknet's NEO Configuration" above
Example: https://(server IP address or hostname)/cgi-bin/dneo/zsaml.cgi
- Click the "Register" button in the upper right to finish.
TrustLogin User Configuration
① When a User Adds It from My Page
Note: The administrator must have already configured the SAML app in advance.
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "desknet's NEO PC Version (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it, then click the "Register" button.
- Click the app on "My Page" or in the "Browser Extension" and confirm that login is successful.
② When an Administrator Adds a Member
- In the "Admin Page > Apps" menu, search for and click the "desknet's NEO PC Version (SAML)" app.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.