SSO Applications in the Enterprise Portal (Preview)

JumpCloud’s Enterprise Portal (EP) centralizes the control and management of Organizations from one dashboard. This enables admins to control all of their organizations efficiently, from a single, browser-based portal. EP Admins can view top-level data for all of their managed orgs at-a-glance. They can also securely launch full management sessions from the EP for any org they administer.

Single Sign On (SSO) gives your Organization's users convenient but secure access to all their web applications with a single set of credentials.

Prerequisites

• A user account with appropriate permissions in the SP
• Any SP specific information, like an org ID, IdP URL, etc.

Terminology:

• Enterprise Portal: Portal where you manage settings for multiple organizations under one Enterprise Configuration. Differs from the JumpCloud Admin Portal, which is for one organization
• Organizations: These are the managed sub-organizations

Creating the Enterprise-Level SSO Application

To create a new JumpCloud Enterprise application

1. Log in to your EP.
2. Select the Configurations tab and click +New.
3. Click + Add New Application (or Get Started if this is your first application) and select:
   • Prebuilt application:
     • Type <Your Application Name> in the Search field and select it
   • Custom SAML application:
     • Click Select on the Custom Application tile, OR
     • Search for Custom SAML App and select it
     • Select Manage Single Sign-On (SSO) > Configure SSO with SAML
   • OIDC application:
     • Click Select on the Custom Application tile, OR
     • Search for OIDC and select it
     • Select Manage Single Sign-On (SSO) > Configure SSO with OIDC
4. Click Next.
5. In the Display Label, type your name for the application.
6. Optionally, customize the display label, description and how the application displays:
   • Description - add a description that users will see in their user portal
   • User Portal Image - choose Logo or Color Indicator
   • Show in User Portal - enable to show the application tile in your organization's user portal
   • If needed, customize the IdP URL:
     • Expand Advanced Settings and enter the name you want to use for the end of the SSO IdP URL, https://sso.jumpcloud.com/saml2/<applicationname>

7. Click Save Application.
8. If successful, click:
   • Configure Application and and go to the next section
   • Close to configure your new application at a later time

To configure the SSO integration

SAML configuration guides for each of the application service providers supported by JumpCloud can be found in the Integrations & Applications section of the JumpCloud Help Center. Find a specific SSO configuration guide by searching for an application's name in the search bar at the top of the page. 

Sharing Enterprise-Level Applications

1. Log in to your EP.
2. Go to the Configurations tab and select the Applications pill.

3. Click on the name of the application and the Share Configuration aside will appear.
4. Select the Organization(s) you would like to share the application with.
5. Click Save.

Managing Access to Enterprise-Level Configurations

To manage user/group access

1. Log in to your EP.
2. Go to the Organizations tab and then click Launch next to the organization that contains the users you want to manage.
3. In the Left Nav, go to Access > SSO Applications.
4. Find and select your SSO Application.
5. Go to the User Groups or Users tab.
6. There are two options:
   • Select the checkbox next to the user groups or users you want to give access
   • Deselect the checkbox next to the user groups or users you want to remove access
7. Click Save.

To manage org access

1. Log in to your EP.
2. Go to the Configurations tab and select the appropriate pill (Applications, Active Directory or Cloud Directories).

3. Click on the name of the configuration.
4. There are two options:
   • Select the box next to the organizations where you want the configuration to be available
   • Deselect the box next to the organizations where the configuration should no longer be available
5. Click Save.