- \n
- A JumpCloud administrator account<\/li>\n\n\n\n
- JumpCloud SSO Package or higher or SSO \u00e0 la carte option<\/li>\n\n\n\n
- A GravityZone Cloud administrator account<\/li>\n\n\n\n
- An online resource, like\u00a0AWS S3 bucket with public web access, traditional web hosting,\u00a0etc., to self host the JumpCloud metadata XML file<\/li>\n<\/ul>\n\n\n\n
Important Considerations<\/strong><\/p>\n\n\n\n
- \n
- GravityZone users must have accounts in JumpCloud\u00a0with the same email addresses<\/li>\n\n\n\n
- GravityZone\u00a0supports only Service Provider (SP) initiated single sign-on<\/li>\n<\/ul>\n\n\n\n
Creating a new JumpCloud Application Integration<\/strong><\/h2>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Go to\u00a0USER AUTHENTICATION\u00a0<\/strong>>\u00a0SSO<\/strong> Applications<\/strong>.<\/li>\n\n\n\n
- Click + Add New Application<\/strong>.<\/li>\n\n\n\n
- Type the name of the application in the Search <\/strong>field and select it.<\/li>\n\n\n\n
- Click Next<\/strong>.<\/li>\n\n\n\n
- In the Display Label<\/strong>, type your name for the application. Optionally, you can enter a Description<\/strong>, adjust the User Portal Image and choose to hide or Show in User Portal<\/strong>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nIf this is a Bookmark Application, enter your sign-in URL in the Bookmark URL<\/strong> field.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Optionally, expand Advanced Settings<\/strong> to specify a value for the SSO IdP URL<\/strong>. If no value is entered, it will default to https:\/\/sso.jumpcloud.com\/saml2\/<applicationname><\/kbd>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\")
<\/p><\/div>Warning:<\/strong> \nThe SSO IdP URL<\/strong> is not editable after the application is created. You will have to delete and recreate the connector if you need to edit this field at a later time.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Click Save Application<\/strong>.<\/li>\n\n\n\n
- If successful, click:\n
- \n
- Configure Application<\/strong> and go to the next section <\/li>\n\n\n\n
- Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
Configuring the SSO Integration<\/strong><\/h2>\n\n\n\n
To obtain the GravityZone Public Certificate<\/strong><\/h3>\n\n\n\n
- \n
- Using Mozilla Firefox, go to https:\/\/gravityzone.bitdefender.com\/<\/a> .<\/li>\n\n\n\n
- In the upper-side menu of the browser, click Tools <\/strong>and select Page Info<\/strong>.\n
- \n
- Alternately, click the lock icon in the address bar, then click the right arrow in the\u00a0Site information<\/strong>\u00a0drop-down menu. In the next panel, click\u00a0More information<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n
- In the Page Info<\/strong> window, go to the Security <\/strong>tab and click the View Certificate<\/strong> button.<\/li>\n\n\n\n
- On the certificate page, click PEM (cert)<\/strong> to download the certificate on your computer. Note where this is downloaded.<\/li>\n<\/ol>\n\n\n\n
To configure JumpCloud<\/strong><\/h3>\n\n\n\n
- \n
- Create a new application<\/a> or select it from the Configured Application<\/strong>s list.<\/li>\n\n\n\n
- Select the SSO <\/strong>tab.<\/li>\n\n\n\n
- Under SP Certficate<\/strong>, click Upload SP Certificate<\/strong>.<\/li>\n\n\n\n
- Browse to and select the certificate downloaded in the previous section. Click Open<\/strong>.<\/li>\n\n\n\n
- Click activate <\/strong>and then click continue <\/strong>on the confirmation window.<\/li>\n\n\n\n
- Find Bitdefender <\/strong>in the application list and click anywhere in the row to reopen the application configuration panel.<\/li>\n\n\n\n
- Select the SSO <\/strong>tab and click Export Metadata<\/strong>.<\/li>\n\n\n\n
- Click Save<\/strong>.<\/li>\n\n\n\n
- Edit the XML file to include:<\/li>\n<\/ol>\n\n\n\n
\n<md:SingleLogoutService Binding=”urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect” Location=”https:\/\/sso.jumpcloud.com\/saml2\/bitdefender”\/><\/kbd> <\/p>\n<\/div><\/div>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\")
<\/p><\/div>Important:<\/strong> \nThis must be placed below the “SingleSignonService Location<\/strong>” and before the “<\/md:IDPSSODescriptor\u201d fields.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Self host the XML file and then note the URL.<\/li>\n<\/ol>\n\n\n\n
To configure Bitdefender<\/strong><\/h3>\n\n\n\n
- \n
- Log into GravityZoneControl Center.<\/li>\n\n\n\n
- In the upper-right corner, go to Welcome, [your username] > My Company<\/strong>.<\/li>\n\n\n\n
- In the Authentication <\/strong>tab, under Single Sign on using SAML<\/strong>, enter the URL for the self hosted metadata in the Identity provider metadata URL field<\/strong>.<\/li>\n\n\n\n
- Click Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n
To change the authentication method for Bitdefender users<\/strong><\/h3>\n\n\n\n
After enabling SSO for a company, GravityZone user accounts under that company become available for changing their authentication method. You can change the authentication method for users one by one, as follows:<\/p>\n\n\n\n
- \n
- Go to the Accounts <\/strong>page.<\/li>\n\n\n\n
- In the table, click the user\u2019s name.<\/li>\n\n\n\n
- Under Settings and Privileges<\/strong>, go to Authentication method<\/strong> and select Login using your Identity Provider<\/strong>.<\/li>\n\n\n\n
- Click Save<\/strong>.<\/li>\n<\/ol>\n\n\n\n
<\/p><\/div>Note:<\/strong> \nYou can enable SSO for as many GravityZone users as you want, but not for your own administrator account.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Authorizing User SSO Access<\/strong><\/h2>\n\n\n\n
Users are implicitly denied access to applications. After you connect an application to JumpCloud, you need to authorize user access to that application. You can authorize user access from the Application Configuration<\/strong> panel or from the Groups Configuration<\/strong> panel. <\/p>\n\n\n\n
To authorize user access from the Application Configuration panel<\/strong><\/h3>\n\n\n\n
- \n
- Log in to the <\/a>JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Go to USER AUTHENTICATION > SSO<\/strong> Applications<\/strong>, then select the application to which you want to authorize user access.<\/li>\n\n\n\n
- Select the User Groups<\/strong> tab. If you need to create a new group of users, see Get Started: User Groups<\/a>.<\/li>\n\n\n\n
- Select the check box next to the group of users you want to give access.<\/li>\n\n\n\n
- Click save<\/strong>. <\/li>\n<\/ol>\n\n\n\n
To learn how to authorize user access from the Groups Configuration<\/strong> panel, see Authorize Users to an SSO Application<\/a>.<\/p>\n\n\n\n
Removing the SSO Integration<\/strong><\/h2>\n\n\n\n
<\/p><\/div>Important:<\/strong> \nThese are steps for removing the integration in JumpCloud. Consult your SP’s documentation for any additional steps needed to remove the integration in the SP. Failure to remove the integration successfully for both the SP and JumpCloud may result in users losing access to the application.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
To deactivate<\/strong><\/strong> the SSO Integration<\/strong><\/h3>\n\n\n\n
- Go to USER AUTHENTICATION > SSO<\/strong> Applications<\/strong>, then select the application to which you want to authorize user access.<\/li>\n\n\n\n
- In the Authentication <\/strong>tab, under Single Sign on using SAML<\/strong>, enter the URL for the self hosted metadata in the Identity provider metadata URL field<\/strong>.<\/li>\n\n\n\n
- Select the SSO <\/strong>tab.<\/li>\n\n\n\n
- In the Page Info<\/strong> window, go to the Security <\/strong>tab and click the View Certificate<\/strong> button.<\/li>\n\n\n\n
- In the upper-side menu of the browser, click Tools <\/strong>and select Page Info<\/strong>.\n
- Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
- If successful, click:\n
- Click Save Application<\/strong>.<\/li>\n\n\n\n
- Go to\u00a0USER AUTHENTICATION\u00a0<\/strong>>\u00a0SSO<\/strong> Applications<\/strong>.<\/li>\n\n\n\n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n