SSO Applications in the Enterprise Portal (Preview)

JumpCloud’s Enterprise Portal (EP) centralizes the control and management of Organizations from one dashboard. This enables admins to control all of their organizations efficiently, from a single, browser-based portal. EP Admins can view top-level data for all of their managed orgs at-a-glance. They can also securely launch full management sessions from the EP for any org they administer.

Single Sign On (SSO) gives your Organization's users convenient but secure access to all their web applications with a single set of credentials.

Terminology:

• Enterprise Portal: Portal where Enterprise Admins manage settings for multiple organizations under one Enterprise Configuration. Differs from the JumpCloud Admin Portal, which is for one organization
  • Enterprise (formerly Enterprise Configuration): Centralized hub for all the organizations' objects in the Enterprise Portal. Items can be created and shared for organizations in the Enterprise Portal from this hub
• Organizations: A division of the enterprise (for example a region or a country) that maintains its own users, devices, and resources

Prerequisites:

• A user account with appropriate permissions in the SP
• Any SP specific information, like an org ID, IdP URL, etc.

Considerations:

• Enterprise level admins can configure and manage SSO Applications on the Enterprise and Organization level
• Organization admins can only add or remove users/groups to SSO Applications on the Organization level. All other tabs will be read-only
• Connectors created at the Organization level cannot be shared to other organizations

Creating the Enterprise-Level SSO Application

To create a new JumpCloud Enterprise application:

1. Log in to your Enterprise Portal.
2. Go to Access > SSO Applications.
3. Click + Add New Application (or Get Started if this is your first application) and select:
   • Prebuilt application:
     • Type <Your Application Name> in the Search field and select it
   • Custom SAML application:
     • Click Select on the Custom Application tile, OR
     • Search for Custom SAML App and select it
     • Select Manage Single Sign-On (SSO) > Configure SSO with SAML
   • OIDC application:
     • Click Select on the Custom Application tile, OR
     • Search for OIDC and select it
     • Select Manage Single Sign-On (SSO) > Configure SSO with OIDC
4. Click Next.
5. In the Display Label, type your name for the application.
6. Optionally, customize the display label, description and how the application displays:
   • Description - add a description that users will see in their user portal
   • User Portal Image - choose Logo or Color Indicator
   • Show in User Portal - enable to show the application tile in your organization's user portal
   • If needed, customize the IdP URL:
     • Expand Advanced Settings and enter the name you want to use for the end of the SSO IdP URL, https://sso.jumpcloud.com/saml2/<applicationname>

7. Click Save Application.
8. If successful, click:
   • Configure Application and and go to the next section
   • Close to configure your new application at a later time

See Get Started: SSO Applications and Get Started: SCIM Connectors to learn more.

To configure the SSO Application Integration:

Application configuration guides for each of the application service providers supported by JumpCloud can be found in the Integrations & Applications section of the JumpCloud Help Center. Find a specific configuration guide by searching for an application's name in the search bar at the top of the page. 

Managing Access to SSO Applications

To manage organization access

1. Log in to your EP.
2. Go to the Access > SSO Applications.
3. Click on the name of the configuration and then select the Organizations tab.
4. There are two options:
   • Select the box next to the organizations where you want the configuration to be available
   • Deselect the box next to the organizations where the configuration should no longer be available
5. Click Save.

To manage organization group access

1. Log in to your EP and use the Global Selector to navigate to your organization.
2. Go to Access > SSO Applications.
3. Find and select your SSO Application.
4. Go to the User Groups tab.
5. There are two options:
   • Select the checkbox next to the user groups you want to give access
   • Deselect the checkbox next to the user groups you want to remove access
6. Click Save.