SSO Applications in the Enterprise Portal (Preview)

JumpCloud’s Enterprise Portal (EP) centralizes the control and management of Organizations from one dashboard. This enables admins to control all of their organizations efficiently, from a single, browser-based portal. EP Admins can view top-level data for all of their managed orgs at-a-glance. They can also securely launch full management sessions from the EP for any org they administer.

Single Sign On (SSO) gives your Organization's users convenient but secure access to all their web applications with a single set of credentials.

Prerequisites

• A JumpCloud user account with Admin with Billing permissions
• JumpCloud SSO Package or higher or SSO à la carte option
• A user account with appropriate permissions in the SP
• Any SP specific information, like an org ID

Terminology:

• Global Configuration: The primary organization. This is where you manage the settings for all the organizations.
• Organizations: These are the managed sub-organizations.

Creating the Enterprise-Level SSO Application

To create a new JumpCloud application

1. Log in to your EP.
2. Click the Enterprise Configuration button.
3. In the Left Nav, go to Access > SSO Applications.
4. Click + Add New Application (or Get Started if this is your first application) and select:
   • Prebuilt application:
     • Type <Your Application Name> in the Search field and select it
   • Custom SAML application:
     • Click Select on the Custom Application tile, OR
     • Search for Custom SAML App and select it
     • Select Manage Single Sign-On (SSO) > Configure SSO with SAML
   • OIDC application:
     • Click Select on the Custom Application tile, OR
     • Search for OIDC and select it
     • Select Manage Single Sign-On (SSO) > Configure SSO with OIDC
5. Click Next.
6. In the Display Label, type your name for the application.
7. Optionally, customize the display label, description and how the application displays:
   • Description - add a description that users will see in their user portal
   • User Portal Image - choose Logo or Color Indicator
   • Show in User Portal - enable to show the application tile in your organization's user portal
8. If needed, customize the IdP URL:
   • Expand Advanced Settings and enter the name you want to use for the end of the SSO IdP URL, https://sso.jumpcloud.com/saml2/<applicationname>

9. Click Save Application.
10. If successful, click:
    • Configure Application and go to the next section
    • Close to configure your new application at a later time

To configure the SSO integration

SAML configuration guides for each of the application service providers supported by JumpCloud can be found in the Integrations & Applications section of the JumpCloud Help Center. Find a specific SSO configuration guide by searching for an application's name in the search bar at the top of the page. 

Sharing Enterprise-Level Applications

1. Log in to your EP.
2. Go to Access > SSO Applications.
3. Click on the name of the application and select the Organizations tab.
4. Select the Organization(s) you would like to share the application with.
5. Click Save.

Managing Access to SSO Applications

To manage organization access

1. Log in to your EP.
2. Go to the Access > SSO Applications.
3. Click on the name of the configuration and then select the Organizations tab.
4. There are two options:
   • Select the box next to the organizations where you want the configuration to be available
   • Deselect the box next to the organizations where the configuration should no longer be available
5. Click Save.

To manage organization group access

1. Log in to your EP and use the Global Selector to navigate to your organization.
2. Go to Access > SSO Applications.
3. Find and select your SSO Application.
4. Go to the User Groups tab.
5. There are two options:
   • Select the checkbox next to the user groups you want to give access
   • Deselect the checkbox next to the user groups you want to remove access
6. Click Save.