{"id":101045,"date":"2023-11-16T15:20:30","date_gmt":"2023-11-16T20:20:30","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=101045"},"modified":"2024-08-15T19:53:24","modified_gmt":"2024-08-15T23:53:24","slug":"integrate-with-aws-verified-access","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access","title":{"rendered":"Integrate with AWS Verified Access"},"content":{"rendered":"\n<p>AWS and JumpCloud have partnered to offer a VPN alternative for securely accessing company applications over the web using <a href=\"https:\/\/jumpcloud.com\/solutions\/passwordless-authentication\">JumpCloud Go\u2122<\/a>, JumpCloud SSO (SAML or OIDC) and <a href=\"https:\/\/aws.amazon.com\/verified-access\/\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Verified Access (AVA)<\/a>. With this collaboration, JumpCloud can authenticate and authorize&nbsp; devices and identities in one console and provide access control for AWS Verified Access for managed devices. See our <a href=\"https:\/\/jumpcloud.com\/blog\/jumpcloud-announces-support-for-device-and-identity-management-with-aws-verified-access\">blog <\/a>for more information about our partnership.<\/p>\n\n\n\n<p><strong>Prerequisites<\/strong><\/p>\n\n\n\n<ul>\n<li>JumpCloud Admin account<\/li>\n\n\n\n<li>Your <a href=\"https:\/\/jumpcloud.com\/support\/settings-in-admin-portal#general\">JumpCloud Org ID<\/a><\/li>\n\n\n\n<li>JumpCloud SSO Package or higher or SSO add-on feature.<\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/add-users-to-admin-portal\">JumpCloud-managed users<\/a> on <a href=\"https:\/\/jumpcloud.com\/support\/add-a-device\">JumpCloud-managed devices<\/a><\/li>\n\n\n\n<li>AWS Admin account (AWS root user)<\/li>\n\n\n\n<li>AWS organization<\/li>\n<\/ul>\n\n\n\n<p>There are three steps:<\/p>\n\n\n\n<ul>\n<li><a href=\"#install-jumpcloud-go\">Installing JumpCloud Go<\/a><\/li>\n\n\n\n<li><a href=\"#configure-an-aws-sso-connector\">Configuring an AWS SSO Connector<\/a><\/li>\n\n\n\n<li><a href=\"#setup-ava\">Setting up AVA<\/a><\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"402\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/11\/AVA-Workflow-1024x402.jpg\" alt=\"\" class=\"wp-image-101118\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/AVA-Workflow-1024x402.jpg 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/AVA-Workflow-300x118.jpg 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/AVA-Workflow-768x302.jpg 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/AVA-Workflow-1536x604.jpg 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/AVA-Workflow.jpg 1598w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-installing-jumpcloud-go\">Installing JumpCloud Go<\/h2>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>Customers already using JumpCloud Go will have access to AVA with no additional JumpCloud configuration.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>The JumpCloud Go Chrome extension provides secure passwordless authentication to JumpCloud protected web resources on managed devices (Mac or Windows). The extension can be installed via<a href=\"https:\/\/jumpcloud.com\/support\/create-a-mac-or-windows-chrome-force-installed-extension-list-policy\"> JumpCloud Policy<\/a>, Google\u2019s <a href=\"https:\/\/support.google.com\/chrome\/a\/answer\/9301891?hl=en\" target=\"_blank\" rel=\"noreferrer noopener\">Chrome Browser Cloud Management<\/a> (CBCM), or <a href=\"https:\/\/jumpcloud.com\/support\/use-jumpcloud-go#installing-the-jumpcloud-go-browser-extension-manually\">manual installation<\/a>.<\/p>\n\n\n\n<p>See <a href=\"https:\/\/jumpcloud.com\/support\/get-started-jumpcloud-go\">Get Started: JumpCloud Go<\/a> and <a href=\"https:\/\/jumpcloud.com\/support\/use-jumpcloud-go\">Use JumpCloud Go<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-configuring-an-aws-sso-connector\">Configuring an AWS SSO Connector<\/h2>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>If an AWS IAM Center SSO connector already exists, you can optionally create a second OIDC connector or go to the next section, <a href=\"#setup-ava\">Setup AVA<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-to-configure-aws-iam-identity-center-sso\">To configure AWS IAM Identity Center SSO<\/h3>\n\n\n\n<p>See <a href=\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-iam-identity-center\">Integrate with AWS IAM Identity Center<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-to-configure-custom-aws-oidc\">To configure Custom AWS OIDC<\/h3>\n\n\n\n<p>See <a href=\"https:\/\/jumpcloud.com\/support\/sso-with-oidc\">SSO with OIDC<\/a>.&nbsp;<\/p>\n\n\n\n<p>For additional information about the AWS OIDC configuration, please view the following AWS documentation:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/aws.amazon.com\/blogs\/networking-and-content-delivery\/aws-verified-access-integration-with-3rd-party-identity-providers\/\" target=\"_blank\" rel=\"noreferrer noopener\">AWS Verified Access Integration with 3rd party identity providers<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/docs.aws.amazon.com\/verified-access\/latest\/ug\/user-trust.html#oidc-provider\" target=\"_blank\" rel=\"noreferrer noopener\">Using an OpenID Connect trust provider<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-setting-up-ava\">Setting up AVA<\/h2>\n\n\n\n<p>AVA provides secure access to company applications over the internet without using a VPN. Once you have set up JumpCloud Go and the AWS SSO Connector, the final step is configuring Verified Access inside AWS. To proceed, please view the following AWS documentation:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/docs.aws.amazon.com\/verified-access\/latest\/ug\/getting-started.html\" target=\"_blank\" rel=\"noreferrer noopener\">Getting Started with Verified Access<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/docs.aws.amazon.com\/verified-access\/latest\/ug\/device-trust.html\" target=\"_blank\" rel=\"noreferrer noopener\">Device-based trust providers<\/a><\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>&nbsp;Your JumpCloud Org ID needs to be put in the Tenant ID of AVA.<\/p>\n <\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>AWS and JumpCloud have partnered to offer a VPN alternative for securely accessing company applications over the web using JumpCloud [&hellip;]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2993,2902],"support_tag":[],"coauthors":[2839],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Integrate with AWS Verified Access - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to use JumpCloud Go, SAML or OIDC SSO and AWS Verified Access as a VPN-less solution for remote employees accessing corporate resources over the web.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Integrate with AWS Verified Access\" \/>\n<meta property=\"og:description\" content=\"Learn how to use JumpCloud Go, SAML or OIDC SSO and AWS Verified Access as a VPN-less solution for remote employees accessing corporate resources over the web.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-15T23:53:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/11\/AVA-Workflow-1024x402.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access\",\"url\":\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access\",\"name\":\"Integrate with AWS Verified Access - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/11\/AVA-Workflow-1024x402.jpg\",\"datePublished\":\"2023-11-16T20:20:30+00:00\",\"dateModified\":\"2024-08-15T23:53:24+00:00\",\"description\":\"Learn how to use JumpCloud Go, SAML or OIDC SSO and AWS Verified Access as a VPN-less solution for remote employees accessing corporate resources over the web.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/AVA-Workflow.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/AVA-Workflow.jpg\",\"width\":1598,\"height\":628},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Integrate with AWS Verified Access\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Integrate with AWS Verified Access - JumpCloud","description":"Learn how to use JumpCloud Go, SAML or OIDC SSO and AWS Verified Access as a VPN-less solution for remote employees accessing corporate resources over the web.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access","og_locale":"en_US","og_type":"article","og_title":"Integrate with AWS Verified Access","og_description":"Learn how to use JumpCloud Go, SAML or OIDC SSO and AWS Verified Access as a VPN-less solution for remote employees accessing corporate resources over the web.","og_url":"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access","og_site_name":"JumpCloud","article_modified_time":"2024-08-15T23:53:24+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/11\/AVA-Workflow-1024x402.jpg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes","Written by":"joyjaswinski"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access","url":"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access","name":"Integrate with AWS Verified Access - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/11\/AVA-Workflow-1024x402.jpg","datePublished":"2023-11-16T20:20:30+00:00","dateModified":"2024-08-15T23:53:24+00:00","description":"Learn how to use JumpCloud Go, SAML or OIDC SSO and AWS Verified Access as a VPN-less solution for remote employees accessing corporate resources over the web.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/AVA-Workflow.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/11\/AVA-Workflow.jpg","width":1598,"height":628},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/integrate-with-aws-verified-access#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Integrate with AWS Verified Access"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/101045"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/101045\/revisions"}],"predecessor-version":[{"id":114281,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/101045\/revisions\/114281"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=101045"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=101045"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=101045"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=101045"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}