{"id":76252,"date":"2023-06-05T13:12:00","date_gmt":"2023-06-05T17:12:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=76252"},"modified":"2023-09-05T22:37:21","modified_gmt":"2023-09-06T02:37:21","slug":"connect-apps-using-pre-built-connectors","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors","title":{"rendered":"SSO using Pre-Built Application Connectors"},"content":{"rendered":"\n<p>Use JumpCloud SAML Single Sign On (SSO) to give your users convenient but secure access to all their web applications with a single set of credentials. Read this article to learn the general&nbsp;steps you need to take to connect applications to JumpCloud with pre-built connectors.&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>Read the&nbsp;<a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/saml-configuration-notes-2019-08-21-10-36-47\" target=\"_blank\" rel=\"noreferrer noopener\">SAML Configuration Notes<\/a>&nbsp;KB before you start configuring the connector.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>Considerations<\/strong>:<\/p>\n\n\n\n<ul>\n<li>Service providers can differ in their behavior, especially when it comes to existing user accounts. Make sure you understand all of the steps you need to take on the SP side for SSO and JIT provisioning.&nbsp;<\/li>\n\n\n\n<li>See&nbsp;<a target=\"_blank\" href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/saml-sso-troubleshooting-2019-08-21-10-36-47\" rel=\"noreferrer noopener\">SAML SSO Troubleshooting<\/a>&nbsp;if a SAML\/SSO connector isn&#8217;t working.&nbsp;<\/li>\n\n\n\n<li>In some rare cases, the service provider (SP) will require the fingerprint of the identity provider (IdP) certificate. To obtain this run the following command in a terminal and replace &lt;filelocation&gt;\/certificate.pem with your certificate&#8217;s location and name:<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-code-block code-block\"><div class=\"code-block-snippet is-type-body-default\">\n<p><kbd>openssl x509 -sha256 -in \/&lt;filelocation&gt;\/certificate.pem -noout -fingerprint<\/kbd><\/p>\n<\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-creating-a-new-jumpcloud-application-integration\"><strong>Creating a new JumpCloud Application Integration<\/strong><\/h2>\n\n\n\n<ol>\n<li>Log in to the&nbsp;<a href=\"https:\/\/console.jumpcloud.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to\u00a0<strong>USER AUTHENTICATION\u00a0<\/strong>&gt;\u00a0<strong>SSO<\/strong> <strong>Applications<\/strong>.<\/li>\n\n\n\n<li>Click&nbsp;<strong>+&nbsp;Add New Application<\/strong>.<\/li>\n\n\n\n<li>Type the name of the application in the <strong>Search <\/strong>field and select it.<\/li>\n\n\n\n<li>Click <strong>Next<\/strong>.<\/li>\n\n\n\n<li>In the <strong>Display Label<\/strong>, type your name for the application. Optionally, you can enter a <strong>Description<\/strong>, adjust the User Portal Image and choose to hide or <strong>Show in User Portal<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>If this is a Bookmark Application, enter your sign-in URL in the <strong>Bookmark URL<\/strong> field.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"7\">\n<li>Optionally, expand <strong>Advanced Settings<\/strong> to specify a value for the<strong> SSO IdP URL<\/strong>. If no value is entered, it will default to <kbd>https:\/\/sso.jumpcloud.com\/saml2\/&lt;applicationname&gt;<\/kbd>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>The <strong>SSO IdP URL<\/strong> is not editable after the application is created. You will have to delete and recreate the connector if you need to edit this field at a later time.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"8\">\n<li>Click <strong>Save Application<\/strong>.<\/li>\n\n\n\n<li>If successful, click:\n<ul>\n<li><strong>Configure Application<\/strong> and go to the next section <\/li>\n\n\n\n<li><strong>Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<p><strong>To gather information from the Service Provider<\/strong><\/p>\n\n\n\n<ol>\n<li>Find out if metadata is available from the service provider. If metadata is available, download it so that you can use it to configure the connector in JumpCloud.&nbsp;<\/li>\n\n\n\n<li>If the service provider requires it, enable SAML functionality.&nbsp;<\/li>\n\n\n\n<li>Keep the service provider information handy when you start configuring the SSO connector in JumpCloud.<\/li>\n<\/ol>\n\n\n\n<p><strong>To find and configure the JumpCloud application connector <\/strong><\/p>\n\n\n\n<ol>\n<li>Select the <strong>SSO <\/strong>tab.<\/li>\n\n\n\n<li>Click\u00a0<strong>Upload Metadata<\/strong>\u00a0under\u00a0<strong>Service Provider Metadata<\/strong>. To manually populate connector field data, see\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/SSO-Application-Connector-Fields\" target=\"_blank\" rel=\"noreferrer noopener\">SSO Application Connector Fields<\/a>.<\/li>\n\n\n\n<li>Add any additional <strong>ACS URLs<\/strong>. Multiple URLs are supported.<\/li>\n\n\n\n<li>Add additional <strong>User<\/strong>, <strong>Constant<\/strong>, or <strong>Group <\/strong>attributes if you\u2019d like to. Refer to\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/saml-attribute-notes\" target=\"_blank\" rel=\"noreferrer noopener\">SAML Attribute Notes<\/a>\u00a0for more information.\u00a0<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>Enabling\/disabling this option affects all users.&nbsp;<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"5\">\n<li>Click\u00a0<strong>save<\/strong>. <\/li>\n\n\n\n<li>Open the application, select the <strong>SSO <\/strong>tab and then click\u00a0<strong>Export Metadata<\/strong>\u00a0under\u00a0<strong>JumpCloud\u00a0Metadata<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Configuring\u00a0the Service Provider\u00a0Connector<\/strong><\/h2>\n\n\n\n<ol>\n<li>Upload JumpCloud\u2019s metadata file to the service provider. This populates the SAML attributes in the service provider.&nbsp;<\/li>\n\n\n\n<li>Change any other service provider settings as needed.<\/li>\n\n\n\n<li>Save the configuration settings.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Use JumpCloud SAML Single Sign On (SSO) to give your users convenient but secure access to all their web applications [&hellip;]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2902],"support_tag":[],"coauthors":[2839,2843],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>SSO using Pre-Built Application Connectors - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to use JumpCloud&#039;s SAML Single Sign On (SSO) to give your users convenient but secure access to all their web apps with a single set of credentials.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SSO using Pre-Built Application Connectors\" \/>\n<meta property=\"og:description\" content=\"Learn how to use JumpCloud&#039;s SAML Single Sign On (SSO) to give your users convenient but secure access to all their web apps with a single set of credentials.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-06T02:37:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski, sashaharrington\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors\",\"url\":\"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors\",\"name\":\"SSO using Pre-Built Application Connectors - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:12:00+00:00\",\"dateModified\":\"2023-09-06T02:37:21+00:00\",\"description\":\"Learn how to use JumpCloud's SAML Single Sign On (SSO) to give your users convenient but secure access to all their web apps with a single set of credentials.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SSO using Pre-Built Application Connectors\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SSO using Pre-Built Application Connectors - JumpCloud","description":"Learn how to use JumpCloud's SAML Single Sign On (SSO) to give your users convenient but secure access to all their web apps with a single set of credentials.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors","og_locale":"en_US","og_type":"article","og_title":"SSO using Pre-Built Application Connectors","og_description":"Learn how to use JumpCloud's SAML Single Sign On (SSO) to give your users convenient but secure access to all their web apps with a single set of credentials.","og_url":"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors","og_site_name":"JumpCloud","article_modified_time":"2023-09-06T02:37:21+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes","Written by":"joyjaswinski, sashaharrington"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors","url":"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors","name":"SSO using Pre-Built Application Connectors - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:12:00+00:00","dateModified":"2023-09-06T02:37:21+00:00","description":"Learn how to use JumpCloud's SAML Single Sign On (SSO) to give your users convenient but secure access to all their web apps with a single set of credentials.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"SSO using Pre-Built Application Connectors"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76252"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76252\/revisions"}],"predecessor-version":[{"id":97340,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/76252\/revisions\/97340"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=76252"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=76252"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=76252"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=76252"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}