How to Configure SAML Authentication for AgileWorks (Admin Site)

Item

Details

Preliminary Check

  • Advance configuration is required on the AgileWorks side.

  • The same email address used for TrustLogin must be registered as the "Login ID" in the AgileWorks user information.
  • For the latest configuration steps, please refer to the manual provided by AgileWorks.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, click here

SP-Side Configuration

Configured by the administrator

Request the SP to configure settings

Provisioning

Supports provisioning via API (account management possible from TrustLogin)

Supports SAML JIT provisioning (account management possible from TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other: Enabled only for users to whom SAML authentication has been applied on the SP side (SAML authentication and password authentication can be used together)

Notes

Please also refer to the following

Table of Contents:

TrustLogin Admin Page Configuration

AgileWorks Configuration

TrustLogin Admin Page Configuration (Continued)

TrustLogin User Configuration


TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Corporate App" screen, search and select "[Admin Site] AgileWorks (SAML)".
    AgileWorks__.png

  3. Note down the "IdP URL" under "Identity Provider Information," and download the certificate from "Get Certificate."
    03.png

    Now, switch to configuring the AgileWorks side.
    Do not click the "Register" button yet; open the AgileWorks admin page in a separate tab.

AgileWorks Configuration

  1. Log in to the AgileWorks admin site with an administrator account and open "Site Common Settings."
    AgileWorks02.png

  2. Open "Login Authentication."
    AgileWorks03.png

  3. Select "Admin Site (Login Method: SAML Integration)" and click "Edit."
    AgileWorks__02.png

  4. Open the "Basic" tab, select "Available" under "Usage Status," and note down the "URL."
    AgileWorks03__.png

  5. Open the "SAML" tab and configure each item as follows
    Redirect Authentication URL The "IdP URL" noted down from TrustLogin
    Public Key Certificate File

    Upload the certificate downloaded from TrustLogin


    AgileWorks__04.png

  6. For the "Screen Transition" and "Access Restriction" tabs, please configure the settings according to your operational policy. For details, refer to the AgileWorks manual.

  7. Click the "Save" button.

Return to the TrustLogin admin page.

TrustLogin Admin Page Configuration (Continued)

  1. Enter the URLs noted down from AgileWorks into the "Login URL" and "Service ACS URL" fields under "Service Provider Configuration."AgileWorks07.png


  2. Save by clicking the "Register" button.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "Register App" screen, select "[Admin Site] AgileWorks (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "[Admin Site] AgileWorks (SAML)" app.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for AgileWorks (Admin Site)

Item

Details

Preliminary Check

  • Advance configuration is required on the AgileWorks side.

  • The same email address used for TrustLogin must be registered as the "Login ID" in the AgileWorks user information.
  • For the latest configuration steps, please refer to the manual provided by AgileWorks.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, click here

SP-Side Configuration

Configured by the administrator

Request the SP to configure settings

Provisioning

Supports provisioning via API (account management possible from TrustLogin)

Supports SAML JIT provisioning (account management possible from TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

SAML Authentication Scope

Enabled for all users (SAML authentication only)

Other: Enabled only for users to whom SAML authentication has been applied on the SP side (SAML authentication and password authentication can be used together)

Notes

Please also refer to the following

Table of Contents:

TrustLogin Admin Page Configuration

AgileWorks Configuration

TrustLogin Admin Page Configuration (Continued)

TrustLogin User Configuration


TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Corporate App" screen, search and select "[Admin Site] AgileWorks (SAML)".
    AgileWorks__.png

  3. Note down the "IdP URL" under "Identity Provider Information," and download the certificate from "Get Certificate."
    03.png

    Now, switch to configuring the AgileWorks side.
    Do not click the "Register" button yet; open the AgileWorks admin page in a separate tab.

AgileWorks Configuration

  1. Log in to the AgileWorks admin site with an administrator account and open "Site Common Settings."
    AgileWorks02.png

  2. Open "Login Authentication."
    AgileWorks03.png

  3. Select "Admin Site (Login Method: SAML Integration)" and click "Edit."
    AgileWorks__02.png

  4. Open the "Basic" tab, select "Available" under "Usage Status," and note down the "URL."
    AgileWorks03__.png

  5. Open the "SAML" tab and configure each item as follows
    Redirect Authentication URL The "IdP URL" noted down from TrustLogin
    Public Key Certificate File

    Upload the certificate downloaded from TrustLogin


    AgileWorks__04.png

  6. For the "Screen Transition" and "Access Restriction" tabs, please configure the settings according to your operational policy. For details, refer to the AgileWorks manual.

  7. Click the "Save" button.

Return to the TrustLogin admin page.

TrustLogin Admin Page Configuration (Continued)

  1. Enter the URLs noted down from AgileWorks into the "Login URL" and "Service ACS URL" fields under "Service Provider Configuration."AgileWorks07.png


  2. Save by clicking the "Register" button.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "Register App" screen, select "[Admin Site] AgileWorks (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "[Admin Site] AgileWorks (SAML)" app.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.