|
Item |
Details |
|
|---|---|---|
|
Prerequisites |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For instructions on how to configure custom attributes, see here |
||
|
SP-side configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based provisioning supported (account management possible in TrustLogin) |
|
|
SAML JIT provisioning supported (account management possible in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access method |
〇 |
SP-Initiated SSO |
|
|
IdP-Initiated SSO |
|
|
Verified operation by device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard browser (Safari) |
|
|
〇 |
iOS - TrustLogin mobile app in-app browser |
|
|
ー |
iOS - Native app |
|
|
〇 |
Android - Standard browser (Chrome) |
|
|
〇 |
Android - TrustLogin mobile app in-app browser |
|
|
ー |
Android - Native app |
|
|
SAML authentication scope |
ー |
Enabled for all users (SAML authentication only) |
| 〇 |
Other: Enabled only for users to whom SAML authentication has been applied on the SP (both SAML authentication and password authentication are available) |
|
|
Remarks |
None in particular |
|
TrustLogin Admin Page Configuration
- Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
- On the "Register Corporate App" screen, search for and select "[Mobile Site] AgileWorks (SAML)".
- Note down the "IdP URL" under "Identity Provider Information", and download the certificate from "Get Certificate".
Now, switch to configuring the AgileWorks side.
Do not click the "Register" button yet; open the AgileWorks admin page in a separate tab.
AgileWorks Configuration
- Log in to the AgileWorks admin site with an administrator account, and open "Site Common Settings".
- Open "Login Authentication".
- Select "Mobile Site" and click "Edit".
- Open the "Basic" tab, select "Available" from "Usage Status", and make a note of the "URL".
- Open the "SAML" tab, and configure each item as follows
Redirect Authentication URL The "IdP URL" you noted from TrustLogin Public Key Certificate File Upload the certificate you downloaded from TrustLogin
- For the settings under the "Screen Transition" and "Access Restriction" tabs, please configure them according to your operational policy. For details, refer to the AgileWorks manual.
- Click the "Save" button.
Return to the TrustLogin admin page again.
TrustLogin Admin Page Configuration (Continued)
- Enter the URLs you noted from AgileWorks into the "Login URL" and "ACS URL for the Service" fields under "Service Provider Settings".
- Click the "Register" button to save.
TrustLogin User Configuration
① When a User Adds the App from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "[Mobile Site] AgileWorks (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it, then click the "Register" button.
- Click the app from "My Page" or the browser extension, and confirm that login succeeds.
② When an Administrator Adds Members
- In the "Admin Page > Apps" menu, search for and click the "[Mobile Site] AgileWorks (SAML)" app.
- Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.