JumpCloud

Single sign-on (SAML 2.0)

In the portal, choose JumpCloud under Enterprise SSO and Start with JumpCloud. Then, in JumpCloud:

1. In the JumpCloud Admin Portal, go to Access → SSO Applications and click Add New Application.
2. Choose Custom SAML App, click Next, choose to configure SSO with SAML, enter a Display Label, and click Save Application, then Configure Application.
3. Enter an IdP Entity ID of your choosing, and the SP Entity ID and ACS URLs below. Leave SAMLSubject NameID as email.
4. Save, then click Copy Metadata URL (or Export Metadata for the file).
5. Bind the user groups who should sign in to the application.

The values the portal shows

What to bring back

Copy Copy Metadata URL — the URL, or the XML — and paste it into the portal's Metadata URL or XML. Prefer the URL.

The assertion must be signed, and must carry the person's email address as an attribute or as a NameID in the emailAddress format. See Any SAML 2.0 provider for the details.

JumpCloud's own guide: https://jumpcloud.com/support/sso-using-custom-saml-application-connectors.

Then verify your domain and turn single sign-on on in the portal: Enterprise SSO.

Directory Sync (SCIM)

In the portal, choose JumpCloud under Directory sync and Create directory; copy the bearer token now, it is shown once. Then, in JumpCloud:

1. Open the Custom SAML App and select the Provisioning tab.
2. Enter the Base URL and Token below, and a Test User Email that does not yet exist here.
3. Click Test Connection.
4. Click Activate — not Save; activation is what runs JumpCloud's provisioning checks.

The values the portal shows

JumpCloud's own guide: https://jumpcloud.com/support/provision-and-manage-users-and-groups-in-apps-using-custom-scim-identity-management-integration.

Related

• Identity provider guides — every provider the portal guides you through.
• Enterprise SSO — the portal's five steps.
• Directory Sync — the portal's SCIM setup.