Note: Prior configuration in SmartHR is required.

Note: For the latest setup instructions, please refer to the manual provided by SmartHR.
Reference: Configuring SAML Authentication (SSO) / Logging in Using SAML Authentication (SSO)

TrustLogin Admin Page Configuration

1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
   
2. Search on the "Register Corporate App" screen and select "SmartHR (SAML)."
   
   
   
   
3. Download the metadata using "Download Metadata" under "Identity Provider Information." (This will be needed later when configuring the SmartHR side.)
   
   
   
   
4. Enter your SmartHR subdomain (tenant ID) in the four blank fields under "Service Provider Settings."
   Reference: What is a Subdomain (Tenant ID)?
   
   
   
   
5. Click the "Register" button to save.
   
   
   
   
6. To perform an operation test, add the administrator as a member of the app you created.
   (For instructions on how to add a member, click here.)

SmartHR Configuration

1. Log in to SmartHR with an administrator account and open "Common Settings > SAML SSO Settings" at the bottom of the left menu.
   
   
2. Click "Edit" for the SAML SSO settings.
   
   
   
   
3. Upload the metadata downloaded from TrustLogin using "Upload Configuration File."
   
   
   
   
4. Set the "Login Button Label." (Optional. You may leave it unset. If left unset, it will display as "Log in with SAML SSO.")
   
   
   
   
   
5. Click "Check Settings" under "Check SAML SSO Settings" to test the connection.
   
   
   
   
6. Open "Common Settings > SAML SSO Accounts" at the bottom of the left menu to configure SAML SSO accounts. Click the "…" menu for the employee for whom you want to enable SAML SSO, and select "Edit SAML SSO Account."
   
   
   
   
   
7. Enter your TrustLogin email address in "Linked IdP Account," check "Enable SSO," and click the "Update" button to save the settings.
   
   
   
   
8. Only accounts that have been enabled will log in via SAML SSO and will no longer be able to log in with an ID/password. Accounts marked "Disabled" will continue to log in with an ID/password.
   
   
   
   
9. Open "Common Settings > SAML SSO Settings" and enable SAML SSO. Check "Enable SAML SSO" and click "Update" to save the settings.
   
   

TrustLogin User Configuration

① When a User Adds the App from My Page

1. Click the "Add App" button on "My Page."
2. On the "Register App" screen, select "SmartHR (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name," enter a new one, then click the "Register" button.
4. Click the app from "My Page" or the "browser extension" and check whether login succeeds.

② When an Administrator Adds a Member

1. In the "Admin Page > Apps" menu, search for and click the "SmartHR (SAML)" app.
2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.