{"id":89074,"date":"2023-05-31T21:12:01","date_gmt":"2023-06-01T01:12:01","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=89074"},"modified":"2024-10-23T17:19:50","modified_gmt":"2024-10-23T21:19:50","slug":"saml-configuration-notes","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/saml-configuration-notes","title":{"rendered":"SAML Configuration Notes"},"content":{"rendered":"\n<p>Use JumpCloud SAML Single Sign On (SSO) to give your users convenient but secure access to all their web applications with a single set of credentials.&nbsp;When you connect a SAML SSO application to JumpCloud, here are a few notes you need to take into consideration before and after you configure an SSO connector.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-pre-configuration\">Pre Configuration<\/h2>\n\n\n\n<p><strong>Customizing Display Options<\/strong><\/p>\n\n\n\n<ul>\n<li>You can customize application display options. You can use the default service provider logo, use the Color Indicator, or upload a custom logo.&nbsp;Learn how to <a href=\"https:\/\/jumpcloud.com\/support\/customize-application-display-options\">customize display options<\/a>.<\/li>\n<\/ul>\n\n\n\n<p><strong>Using Certificates<\/strong><\/p>\n\n\n\n<ul>\n<li>A public certificate and private key pair are required to successfully connect applications with JumpCloud. After you activate an application, we automatically generate a public certificate and private key pair for you. You can use this pair or upload your own.\n<ul>\n<li>Learn how to <a href=\"https:\/\/jumpcloud.com\/support\/generate-public-certificates-and-private-keys\">generate a public certificate and private key pair<\/a> and <a href=\"https:\/\/jumpcloud.com\/support\/manage-application-idp-certificate-and-key-pairs\" target=\"_blank\" rel=\"noreferrer noopener\">manage<\/a> them.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>JumpCloud SAML SSO connectors support SHA-256 certificates by default. Although JumpCloud supports SHA-1 certificates, if the service provider supports it, we recommend using SHA-256 for stronger security.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p><strong>Exporting JumpCloud Metadata<\/strong><\/p>\n\n\n\n<ul>\n<li>When you configure SAML applications, you have two options to export JumpCloud metadata and upload it to the service provider. \n<ul>\n<li>Export a JumpCloud metadata file. \n<ul>\n<li>From <strong>Applications<\/strong>, select the option next to the application name, click <strong>export metadata<\/strong> in the top right corner, save the file, then upload the metadata file to the service provider. <\/li>\n\n\n\n<li>From the <strong>Application\u2019s Details Panel<\/strong>, select the <strong>SSO <\/strong>tab, then click <strong>Export Metadata<\/strong> under <strong>JumpCloud Metadata<\/strong>.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Copy the Metadata URL.\n<ul>\n<li>From the <strong>Application\u2019s Details Panel<\/strong>, select the <strong>SSO<\/strong> tab, then click <strong>Copy Metadata URL<\/strong>. This will copy the URL to the clipboard.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p><strong>Configuring Attributes<\/strong><\/p>\n\n\n\n<ul>\n<li>Though they aren\u2019t required, you can add supplemental user, constant, and group attributes in the SAML 2.0 Connector and in pre-built connectors that may be used to support functionality like provisioning. Make sure the attributes are supported by the service provider.<\/li>\n<\/ul>\n\n\n\n<p><strong>Connecting Applications<\/strong><\/p>\n\n\n\n<ul>\n<li>You can connect SAML applications to JumpCloud by configuring one of our many pre-built SAML connectors or by configuring our SAML 2.0 connector.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n<ul>\n<li>See <a href=\"https:\/\/jumpcloud.com\/sso-connectors\/#sso-grid\">JumpCloud&#8217;s Integration Catalog<\/a>.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul>\n<li>Learn how to configure JumpCloud&#8217;s SAML 2.0 <a href=\"https:\/\/jumpcloud.com\/support\/sso-using-custom-saml-application-connectors\">custom connector<\/a> or <a href=\"https:\/\/jumpcloud.com\/support\/connect-apps-using-pre-built-connectors\">prebuilt connectors<\/a>.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-post-configuration\">Post Configuration<\/h2>\n\n\n\n<p><strong>Troubleshooting<\/strong><\/p>\n\n\n\n<ul>\n<li>See&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/saml-sso-troubleshooting\">SAML SSO Troubleshooting<\/a>&nbsp;if a SAML SSO connector isn&#8217;t working.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p><strong>Authorizing Users<\/strong><\/p>\n\n\n\n<ul>\n<li>Users are implicitly denied access to applications. After you connect an application to JumpCloud, you must <a href=\"https:\/\/jumpcloud.com\/support\/authorize-users-to-an-sso-app\">authorize user access to that application<\/a>.<\/li>\n<\/ul>\n\n\n\n<p><strong>Provisioning Users<\/strong><\/p>\n\n\n\n<ul>\n<li>You can use <a href=\"https:\/\/jumpcloud.com\/support\/sso-using-custom-saml-application-connectors#configuring-jit-provisioning-\">Just-In-Time provisioning<\/a> with the SAML 2.0 Connector and some of our pre-built connectors. This reduces the steps in provisioning users to SAML applications.<\/li>\n<\/ul>\n\n\n\n<p><strong>Managing User Portal Session Duration<\/strong><\/p>\n\n\n\n<ul>\n<li>You can <a href=\"https:\/\/jumpcloud.com\/support\/settings-in-admin-portal#user-portal-session-duration\">configure the User Portal Session Duration<\/a> for your organization. This affects how often users have to log in to their User Portal and applications.<\/li>\n<\/ul>\n\n\n\n<p><strong>Deleting or Deactivating a SAML SSO Application<\/strong><\/p>\n\n\n\n<ul>\n<li>Deactivate a SAML SSO application and temporarily suspend user access to an application.<\/li>\n\n\n\n<li>Delete a SAML SSO application and permanently remove it from the User Portal and Admin Portal.<\/li>\n<\/ul>\n\n\n\n<p><strong>Using Conditional Access Policies with Applications<\/strong><\/p>\n\n\n\n<ul>\n<li>Add an extra layer of security when users access applications. You can restrict or deny access based on conditions that you set. For example, after a user logs in to the User Portal, require Multi-factor Authentication when they access certain applications or deny access when they access an application from an unapproved network. Learn more in&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/get-started-conditional-access-policies\">Get Started: Conditional Access Policies<\/a>.&nbsp;<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Use JumpCloud SAML Single Sign On (SSO) to give your users convenient but secure access to all their web applications [&hellip;]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2902],"support_tag":[],"coauthors":[2839,3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>SAML Configuration Notes - JumpCloud<\/title>\n<meta name=\"description\" content=\"Understand the key considerations prior to and after configuring SAML SSO application integrations with JumpCloud.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/saml-configuration-notes\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SAML Configuration Notes\" \/>\n<meta property=\"og:description\" content=\"Understand the key considerations prior to and after configuring SAML SSO application integrations with JumpCloud.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/saml-configuration-notes\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-23T21:19:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/saml-configuration-notes\",\"url\":\"https:\/\/jumpcloud.com\/support\/saml-configuration-notes\",\"name\":\"SAML Configuration Notes - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-01T01:12:01+00:00\",\"dateModified\":\"2024-10-23T21:19:50+00:00\",\"description\":\"Understand the key considerations prior to and after configuring SAML SSO application integrations with JumpCloud.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/saml-configuration-notes#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/saml-configuration-notes\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/saml-configuration-notes#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SAML Configuration Notes\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SAML Configuration Notes - JumpCloud","description":"Understand the key considerations prior to and after configuring SAML SSO application integrations with JumpCloud.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/saml-configuration-notes","og_locale":"en_US","og_type":"article","og_title":"SAML Configuration Notes","og_description":"Understand the key considerations prior to and after configuring SAML SSO application integrations with JumpCloud.","og_url":"https:\/\/jumpcloud.com\/support\/saml-configuration-notes","og_site_name":"JumpCloud","article_modified_time":"2024-10-23T21:19:50+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"joyjaswinski, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/saml-configuration-notes","url":"https:\/\/jumpcloud.com\/support\/saml-configuration-notes","name":"SAML Configuration Notes - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-01T01:12:01+00:00","dateModified":"2024-10-23T21:19:50+00:00","description":"Understand the key considerations prior to and after configuring SAML SSO application integrations with JumpCloud.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/saml-configuration-notes#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/saml-configuration-notes"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/saml-configuration-notes#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"SAML Configuration Notes"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/89074"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/89074\/revisions"}],"predecessor-version":[{"id":116765,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/89074\/revisions\/116765"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=89074"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=89074"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=89074"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=89074"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}