SaaS Management: Enable JumpCloud Go Extension Seamless Authentication in Chrome

This article explains how Google Workspace (GWS) administrators can enable seamless, zero-touch authentication for users of the JumpCloud Go™ extension. This allows users signed in to their Chrome profile to automatically pre-authorize the JumpCloud extension. This removes manual sign in requirements and approval prompts, which reduces onboarding friction and enables faster utilization of SaaS Management.

Prerequisites:

• JumpCloud Go must be enabled in your org. See Get Started: JumpCloud Go to learn more.
• JumpCloud Go extension version 1.3.25 or later must be installed in Chrome browsers.
• You must have Google Workspace Super Administrator privileges to complete these steps.
• You’ll need the following JumpCloud Application Details for the configuration:
  • Client ID: 296541653484-qlullor7ps6qr2j1rdi7g47e9nlcblvs.apps.googleusercontent.com
  • Required OAuth Scopes: openid and https://www.googleapis.com/auth/userinfo.email

Setting Up Domain-Wide Delegation in GWS

You’ll need to configure your Google Workspace account to trust the JumpCloud extension and grant it the necessary permissions to identify your users securely.

To access Domain-Wide Delegation:

1. Log in to the Google Workspace Admin console
2. In the left menu, go to Security > Access, then data control > API controls.
3. In the API controls panel, go to the Domain-wide Delegation section and click MANAGE DOMAIN-WIDE DELEGATION.
   

To add a new API client:

1. At the top of the API clients page, click Add new. The Add a new client ID window appears.
2. In the Client ID field, paste the unique numerical Client ID provided in the Prerequisites.
3. In the OAuth scopes (comma-delimited) field, you must enter the exact permission scopes that the extension requires. These scopes allow the extension to securely view your users' email addresses for identification purposes and associate users with their personal info on Google.
   
4. Click Authorize.
5. The JumpCloud application should now be listed under the Domain-wide Delegation page and configuration is complete.