{"id":110483,"date":"2024-05-16T23:51:11","date_gmt":"2024-05-17T03:51:11","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=110483"},"modified":"2024-05-22T12:28:10","modified_gmt":"2024-05-22T16:28:10","slug":"test-m365-sso-for-named-accounts","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts","title":{"rendered":"Test M365 SSO for Named Accounts"},"content":{"rendered":"\n<p>Jumpcloud allows for <a href=\"https:\/\/support.jumpcloud.com\/s\/article\/single-sign-on-sso-with-office-3651\">M365 SSO<\/a>  to authenticate users into M365 via Jumpcloud. However, due to limitations with M365 once M365 SSO is enabled, all users in the federated domain must start using Jumpcloud immediately. This article describes a method to enable M365 SSO for named accounts. This allows admins to test M365 SSO with their production accounts without affecting the wider user population.<\/p>\n\n\n\n<p><strong>Prerequisites<\/strong><\/p>\n\n\n\n<ul>\n<li>You have reviewed the following articles:\n<ul>\n<li><a href=\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-and-saml-connector\">Understand the Difference Between the Microsoft 365 Directory Integration and SAML Connector<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#m365-integration-scenarios\">Microsoft 365 Integration Scenarios<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/m365-directory-integration-overview#provisioning-new-m365-accounts\">Microsoft 365 User Import Provisioning<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/m365-sync#giving-jumpcloud-users-access-to-m365\">Giving JumpCloud Users Access to Microsoft 365<\/a>&nbsp;<\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/support\/sso-with-m365\">SSO with M365\/Entra ID<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>You have a Custom Domain name verified with M365 that is not your production domain (referred to as a <em>staging domain<\/em> in this article).<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Creating and Verifying a Staging Domain<\/h2>\n\n\n\n<ol>\n<li>As mentioned in the Prerequisites section, a verified custom domain name is needed which is not the production domain:\n<ul>\n<li>For example &#8211; The company Rickie uses <kbd>rickie-demo.co.uk<\/kbd> as their M365 production domain. All users authenticate to M365 using their email address of <kbd>username@rickie-demo.co.uk<\/kbd><\/li>\n\n\n\n<li>Within M365, the company Rickie has verified another custom domain named rickie-staging.co.uk which is not in use by their users. Rickie-staging.co.uk will be used for federation.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>This can be verified in Azure by navigation to <strong>Azure Active Directory -&gt; Custom Domain Names<\/strong>&nbsp;<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"815\" height=\"85\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804.png\" alt=\"\" class=\"wp-image-110484\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804.png 815w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804-300x31.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804-768x80.png 768w\" sizes=\"(max-width: 815px) 100vw, 815px\" \/><\/figure>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Any purchased domain name can be used for the purpose of this article. It just needs to be a MS verified custom domain name which is not in use by users within the organization.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Creating an M365\/Entra ID Cloud Directory in Jumpcloud<\/h2>\n\n\n\n<p>SSO from JumpCloud only works with users that are directly imported from M365 Synced Directory. Otherwise, immutable ID cannot be achieved. The immutableID is used in our M365 prebuilt SSO connector as the nameID and is used as a unique identifier in each SAML assertion. The M365 directory should sync with JumpCloud. Import your users to SSO and bind those users to the M365 directory and M365 SAML application. In that way, the immutable ID can be provided.<\/p>\n\n\n\n<p>Follow the steps in <a href=\"https:\/\/jumpcloud.com\/support\/m365-sync#adding-and-authorizing-an-m365\/entra-id-sync-integration\">this article<\/a> to create the M365\/Entra ID Cloud Directory.<\/p>\n\n\n\n<p>Please note this should be integrated with the production domain. Using the domain names in the above example the Cloud Directory will be integrated with the rickie-demo.co.uk domain.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Configuring SSO with M365<\/h2>\n\n\n\n<p>Follow the steps in <a href=\"https:\/\/jumpcloud.com\/support\/sso-with-m365\">this article<\/a> to federate the M365 staging domain with Jumpcloud.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>Federation should be carried out with the staging domain not the production domain.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p>Using the domain names in the above example Federation will configured for rickie-staging.co.uk AND NOT rickie-demo.co.uk (domain suffix for user logins)<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Naming Accounts for Federation Using Aliasing<\/h2>\n\n\n\n<p>For any production accounts you would like to test Jumpcloud SSO with:&nbsp;<\/p>\n\n\n\n<ol>\n<li>Login to Microsoft 365 admin Centre.<\/li>\n\n\n\n<li>Navigate to <strong>Users<\/strong>.<\/li>\n\n\n\n<li>Select the user account you would like to test Jumpcloud SSO with.<\/li>\n\n\n\n<li>Select <strong>Manage Username and email<\/strong>.<\/li>\n\n\n\n<li>Add an alias to the account using the same username but with the staging domain.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"649\" height=\"299\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f400844.png\" alt=\"\" class=\"wp-image-110485\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f400844.png 649w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f400844-300x138.png 300w\" sizes=\"(max-width: 649px) 100vw, 649px\" \/><\/figure>\n\n\n\n<ol start=\"6\">\n<li>Select <strong>Add <\/strong>and <strong>Save Changes<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Testing SSO<\/h2>\n\n\n\n<ol>\n<li>Navigate to the <a href=\"https:\/\/portal.office.com\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft Portal<\/a> and sign in with the alias created.<\/li>\n\n\n\n<li>You will be redirected to Jumpcloud.<\/li>\n\n\n\n<li>Authenticate to Jumpcloud using primary username.<\/li>\n\n\n\n<li>You are now logged into M365 using your prod credentials.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Jumpcloud allows for M365 SSO to authenticate users into M365 via Jumpcloud. However, due to limitations with M365 once M365 [&hellip;]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2954,2998,2902],"support_tag":[],"coauthors":[2839],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Test M365 SSO for Named Accounts - JumpCloud<\/title>\n<meta name=\"description\" content=\"Create a staging domain to test SSO before enabling it for your entire organization.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Test M365 SSO for Named Accounts\" \/>\n<meta property=\"og:description\" content=\"Create a staging domain to test SSO before enabling it for your entire organization.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-22T16:28:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts\",\"url\":\"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts\",\"name\":\"Test M365 SSO for Named Accounts - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804.png\",\"datePublished\":\"2024-05-17T03:51:11+00:00\",\"dateModified\":\"2024-05-22T16:28:10+00:00\",\"description\":\"Create a staging domain to test SSO before enabling it for your entire organization.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804.png\",\"width\":815,\"height\":85},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Test M365 SSO for Named Accounts\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Test M365 SSO for Named Accounts - JumpCloud","description":"Create a staging domain to test SSO before enabling it for your entire organization.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts","og_locale":"en_US","og_type":"article","og_title":"Test M365 SSO for Named Accounts","og_description":"Create a staging domain to test SSO before enabling it for your entire organization.","og_url":"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts","og_site_name":"JumpCloud","article_modified_time":"2024-05-22T16:28:10+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"joyjaswinski"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts","url":"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts","name":"Test M365 SSO for Named Accounts - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804.png","datePublished":"2024-05-17T03:51:11+00:00","dateModified":"2024-05-22T16:28:10+00:00","description":"Create a staging domain to test SSO before enabling it for your entire organization.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/05\/Snag_4f3e5804.png","width":815,"height":85},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/test-m365-sso-for-named-accounts#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Test M365 SSO for Named Accounts"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/110483"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/110483\/revisions"}],"predecessor-version":[{"id":110665,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/110483\/revisions\/110665"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=110483"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=110483"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=110483"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=110483"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}