[Access Control] How to Configure HENNGE One Settings for SAML Connection (for Custom Registration)

Overview

This article explains the setup procedure on the HENNGE One side when configuring a SAML connection with Custom Registration. It covers the information to check in advance with the connected service and the setup method in the Access Control Administration.

Notes

1. This article is based on the product specifications as of August 2026 and may be subject to change without notice.

Procedure

Checking the values to configure in HENNGE One

1. Obtain the values to configure in HENNGE One from the connected service.
   Please obtain the following information in advance before configuring HENNGE One.
   ※You may also configure Access Control first.
   • ACS URL
   • SP Issuer (Audience)
   • Name ID
   • Name ID format
   • Other Attribute information required by the connected service

Configuring HENNGE One

1. In the Access Control Administration, go to [System] - [Edit Connected Service].

   

2. Click [+Add Service].
   If you are updating the settings of an already added connected service, click the target connected service displayed on the Edit Connected Service screen and proceed to step 6.

   

3. On the Add New Service screen, click [Add Service].

   

4. Click [Set up new SSO service] - [SAML Manual Setup].

   

5. On the [Add New Service - SAMLSSO] screen, enter the following items.

   • Service name
   • ACS URL
   • Additional ACS URLs
     Set this if required by the service.
   • SP Issuer (Audience)
   • Name ID (key information used to link with the SP service)
     If the key information used to identify the user is an email address, select Email or UserPrincipalName (UPN).
     For details about Name ID, please refer to the article below.
     [Access Control] What Name IDs Are Available in Single Sign-On Settings?
   • Name ID format
   • Login URL
     Set this if required by the service.
   • Relay State
     Set this if required by the service.
   • Sign mode
     Depending on the service, only either "Assertion" or "Response" may be supported.
   • Available AuthnContext
     This setting is used to support Salesforce multi-factor authentication.
   • Unique part
     If the issuer (Issuer URL) or Entity ID is duplicated on the service side, you may need to set a Unique part.

   

6. If necessary, click [Attribute Editor] - [Add new attribute row], and set the values specified by the SP service for "Attribute" and "Value".
   Depending on the service, adding attributes may be required.

   

7. Click [Save] to save the settings. The information for the registered connected service will be displayed.
   If the single sign-on settings on the connected service side have not yet been completed, copy the values or download them for your reference.

   • IdP Issuer
   • SSO login URL
   • Logout URL
   • Direct login URL
   • IdP Metadata
   • SAML Signing Certificate

   

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.