- \n
- A JumpCloud administrator account.<\/li>\n\n\n\n
- JumpCloud SSO Package or higher or SSO add-on feature.<\/li>\n\n\n\n
- A Templafy user account with administrator permissions.<\/li>\n\n\n\n
- Your Templafy tenant.<\/li>\n<\/ul>\n\n\n\n
<\/a>Important Considerations<\/strong><\/p>\n\n\n\n
- \n
- SAML SSO is recommended, but not required. <\/li>\n\n\n\n
- Templafy SCIM API is based on version 2.0 of the\u00a0SCIM standard.<\/li>\n\n\n\n
- If you need to update the SCIM token, you must\u00a0deactivate the IdM integration<\/a>, update the token, and then reactivate the IdM integration.<\/li>\n\n\n\n
- The following provisioning features are supported for users:\n
- \n
- Create users.<\/li>\n\n\n\n
- Update user attributes.<\/li>\n\n\n\n
- Deactivate users.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Groups are supported. <\/li>\n<\/ul>\n\n\n\n
Attribute Considerations<\/strong><\/p>\n\n\n\n
- \n
- A default set of attributes are managed for users. See the Attribute Mappings<\/a> section for more details.<\/li>\n<\/ul>\n\n\n\n
Creating a new JumpCloud Application Integration<\/strong><\/h2>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Go to\u00a0USER AUTHENTICATION\u00a0<\/strong>>\u00a0SSO<\/strong> Applications<\/strong>.<\/li>\n\n\n\n
- Click + Add New Application<\/strong>.<\/li>\n\n\n\n
- Type the name of the application in the Search <\/strong>field and select it.<\/li>\n\n\n\n
- Click Next<\/strong>.<\/li>\n\n\n\n
- In the Display Label<\/strong>, type your name for the application. Optionally, you can enter a Description<\/strong>, adjust the User Portal Image and choose to hide or Show in User Portal<\/strong>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nIf this is a Bookmark Application, enter your sign-in URL in the Bookmark URL<\/strong> field.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Optionally, expand Advanced Settings<\/strong> to specify a value for the SSO IdP URL<\/strong>. If no value is entered, it will default to https:\/\/sso.jumpcloud.com\/saml2\/<applicationname><\/kbd>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\")
<\/p><\/div>Warning:<\/strong> \nThe SSO IdP URL<\/strong> is not editable after the application is created. You will have to delete and recreate the connector if you need to edit this field at a later time.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Click Save Application<\/strong>.<\/li>\n\n\n\n
- If successful, click:\n
- \n
- Configure Application<\/strong> and go to the next section <\/li>\n\n\n\n
- Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
Configuring the SSO Integration<\/strong><\/h2>\n\n\n\n
To configure JumpCloud<\/strong><\/h3>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\")
<\/p><\/div>Important:<\/strong> \nIf you are a new customer onboarding on HIVE or an existing customer upgrading to HIVE, please note that Templafy has introduced regional data clusters for hosting the Templafy solution. These will be reflected in the SAML endpoints based on the geographical location. To use the ACS URL in JumpCloud based on your region, go to the\u00a0Sign On<\/strong>\u00a0tab of the application, check\u00a0Upgrade to Templafy HIVE<\/strong>, and enter the respective Assertion Consumer Service value:<\/p>\n\n\n\n
https:\/\/app.templafy.com\/AuthServices\/Acs<\/kbd><\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Create a new application<\/a>\u00a0or select it from the\u00a0Configured Application<\/strong>s list.<\/li>\n\n\n\n
- Select the SSO<\/strong> tab.<\/li>\n\n\n\n
- Add or change any attributes.<\/li>\n\n\n\n
- Click\u00a0save<\/strong>.<\/li>\n<\/ol>\n\n\n\n
Copy the metadata URL<\/strong><\/h4>\n\n\n\n
- \n
- Find your application in the Configured Applications<\/strong> list and click anywhere in the row to reopen its configuration window.<\/li>\n\n\n\n
- Select the SSO <\/strong>tab and click Copy Metadata URL<\/strong>.<\/li>\n\n\n\n
- The URL will be copied to your clipboard.<\/li>\n<\/ol>\n\n\n\n
To configure Templafy<\/strong><\/h3>\n\n\n\n
- \n
- Contact the Templafy Support team<\/a> and request that they enable SAML 2.0 for your organization.<\/li>\n\n\n\n
- Provide the Metadata URL downloaded in the previous section.<\/li>\n<\/ol>\n\n\n\n
Configuring the Identity Management Integration<\/strong><\/h2>\n\n\n\n
To configure Templafy<\/strong><\/h3>\n\n\n\n
- \n
- Go to <yourtenant>.templafy.com\u00a0in a browser and click\u00a0Administration<\/strong><\/li>\n\n\n\n
- Navigate to Authentication Method<\/strong> section in the admin interface <\/li>\n\n\n\n
- Scroll further down where you will see a field called The SCIM API Key<\/strong>.<\/li>\n\n\n\n
- Generate a key, copy it, and store it in a secure place, like a Passwor Manager.<\/li>\n<\/ol>\n\n\n\n
To configure JumpCloud<\/strong><\/h3>\n\n\n\n
- \n
- Create a new application<\/a> or select it from the Configured Application<\/strong>s list.<\/li>\n\n\n\n
- Select the Identity Managemen<\/strong>t tab.<\/li>\n\n\n\n
- Select the Enable management of User Groups and Group Membership in this application<\/strong> checkbox if you want to provision, manage, and sync groups in Templafy from JumpCloud.<\/li>\n\n\n\n
- Click Configure<\/strong>.<\/li>\n\n\n\n
- In the Token Key <\/strong>field, <\/strong>paste the token generated in the previous section.<\/li>\n\n\n\n
- Click Activate<\/strong>. <\/li>\n\n\n\n
- You will receive a confirmation that the Identity Management integration has been successfully verified.<\/li>\n\n\n\n
- Click save<\/strong>.<\/li>\n\n\n\n
- You can now connect user groups to the application in JumpCloud to provision the members of that group in Templafy. Learn how to Authorize Users to an Application<\/a>.<\/li>\n<\/ol>\n\n\n\n
Attribute Mappings<\/strong><\/h2>\n\n\n\n
The following table lists attributes that JumpCloud sends to the application. See Attribute Considerations<\/a> for more information regarding attribute mapping considerations. <\/p>\n\n\n\n
Learn about JumpCloud Properties and how they work with system users in our API<\/a>. <\/p>\n\n\n\n
\nTemplafy User Attributes<\/h3>\n
\n\n\n
\n \n JumpCloud Property <\/th>\n \n JumpCloud UI Field Name <\/th>\n \n SCIM v2 Mapping <\/th>\n \n Templafy\u00a0Value <\/th>\n <\/tr>\n \n \n username <\/td>\n \n Username <\/td>\n \n userName <\/td>\n \n userName <\/td>\n <\/tr>\n \n \n active <\/td>\n \n Status <\/td>\n \n active <\/td>\n \n active <\/td>\n <\/tr>\n \n \n firstname <\/td>\n \n First Name <\/td>\n \n name.givenName <\/td>\n \n First Name <\/td>\n <\/tr>\n \n \n lastname <\/td>\n \n Last Name <\/td>\n \n name.familyName <\/td>\n \n Last Name <\/td>\n <\/tr>\n \n \n preferredLanguage <\/td>\n \n preferredLanguage <\/td>\n \n preferredLanguage <\/td>\n \n preferredLanguage <\/td>\n <\/tr>\n \n \n department <\/td>\n \n Department <\/td>\n \n department <\/td>\n \n department <\/td>\n <\/tr>\n \n \n displayname <\/td>\n \n Display Name <\/td>\n \n displayname <\/td>\n \n displayname <\/td>\n <\/tr>\n \n \n jobTitle <\/td>\n \n Job Title <\/td>\n \n jobTitle <\/td>\n \n title <\/td>\n <\/tr>\n \n \n preferredLanguage <\/td>\n \n preferredLanguage <\/td>\n \n preferredLanguage <\/td>\n \n preferredLanguage <\/td>\n <\/tr>\n \n \n phoneNumbers.value\u00a0\u00a0 \u00a0 <\/td>\n \n Work Phone <\/td>\n \n phoneNumbers.value\u00a0\u00a0 \u00a0 <\/td>\n \n phoneNumbers.value\u00a0\u00a0 \u00a0 <\/td>\n <\/tr>\n \n \n addresses.locality\u00a0\u00a0 \u00a0 <\/td>\n \n Work City <\/td>\n \n addresses.locality\u00a0\u00a0 \u00a0 <\/td>\n \n addresses.locality\u00a0\u00a0 \u00a0 <\/td>\n <\/tr>\n \n \n addresses.region\u00a0\u00a0 \u00a0 <\/td>\n \n Work State <\/td>\n \n addresses.region\u00a0\u00a0 \u00a0 <\/td>\n \n addresses.region\u00a0\u00a0 \u00a0 <\/td>\n <\/tr>\n \n \n addresses.country\u00a0\u00a0 \u00a0 <\/td>\n \n Work Country <\/td>\n \n addresses.country\u00a0\u00a0 \u00a0 <\/td>\n \n addresses.country\u00a0\u00a0 \u00a0 <\/td>\n <\/tr>\n \n \n addresses.postalCode\u00a0\u00a0 <\/td>\n \n Work Postal Code <\/td>\n \n addresses.postalCode\u00a0\u00a0 <\/td>\n \n addresses.postalCode\u00a0\u00a0 <\/td>\n <\/tr>\n \n \n addresses.streetAddress\u00a0\u00a0 \u00a0 <\/td>\n \n Work Street Address <\/td>\n \n addresses.streetAddress\u00a0\u00a0 \u00a0 <\/td>\n \n addresses.streetAddress\u00a0\u00a0 \u00a0 <\/td>\n <\/tr>\n \n \n company <\/td>\n \n Company <\/td>\n \n organization <\/td>\n \n organization <\/td>\n <\/tr>\n \n \n employeeIdentifier <\/td>\n \n Employee ID <\/td>\n \n externalId <\/td>\n \n externalId <\/td>\n <\/tr>\n <\/table>\n<\/div><\/div>\n\n\n\n \nGroup Attributes<\/h3>\n
\n - Select the Identity Managemen<\/strong>t tab.<\/li>\n\n\n\n
- Navigate to Authentication Method<\/strong> section in the admin interface <\/li>\n\n\n\n
- Provide the Metadata URL downloaded in the previous section.<\/li>\n<\/ol>\n\n\n\n
- Select the SSO <\/strong>tab and click Copy Metadata URL<\/strong>.<\/li>\n\n\n\n
- Select the SSO<\/strong> tab.<\/li>\n\n\n\n
- Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
- If successful, click:\n
- Click Save Application<\/strong>.<\/li>\n\n\n\n
- Go to\u00a0USER AUTHENTICATION\u00a0<\/strong>>\u00a0SSO<\/strong> Applications<\/strong>.<\/li>\n\n\n\n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- A default set of attributes are managed for users. See the Attribute Mappings<\/a> section for more details.<\/li>\n<\/ul>\n\n\n\n
- The following provisioning features are supported for users:\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\"){kind=icon}
<\/p><\/div>