![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\"){kind=icon}
<\/p><\/div>
Read SAML Configuration Notes<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n On Windows, PowerShell 5.1 or higher must be used. PowerShell Core<\/a> has version 7+.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n If Entra Connect or Entra Connect Cloud Sync is active for your organization, JumpCloud won’t be able to update your users in M365. SSO will still function based on users’ JumpCloud logins.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n $OrgID = (Get-MgOrganization).id It may take up to 20 minutes for the setting change to be applied.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n This setting applies to all<\/em> domains in your M365 account, not just SSO domains.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n The iOS Mail client supports SSO. If you want to use JumpCloud\u2019s SSO with the iOS Mail client:<\/p>\n\n\n\n If this is a Bookmark Application, enter your sign-in URL in the Bookmark URL<\/strong> field.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n The SSO IdP URL<\/strong> is not editable after the application is created. You will have to delete and recreate the connector if you need to edit this field at a later time.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Ensure that all users who will be using M365 SSO are associated<\/a> (bound) to your M365 Cloud Directory Integration instance. Users who are not associated (bound) to the M365 Cloud Directory Integration will NOT<\/strong> be able to login using SSO, because they will be missing the required M365 immutable ID.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n The IdP Entity ID<\/strong> and Login URL<\/strong> fields must match the M365 domain that\u2019s to be SSO-enabled (federated) over to JumpCloud. These fields shouldn\u2019t be the default domain, (e.g., YOUR_DOMAIN.onmicrosoft.com<\/strong>).<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n The JumpCloud-office365-metadata.xml<\/strong> file will download to your local Downloads <\/strong>folder.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\nPrerequisites<\/strong><\/h2>\n\n\n\n
\n
\n
\n
\n
<\/p><\/div>\n
\n
\n
Considerations<\/h2>\n\n\n\n
Important Considerations<\/strong><\/h3>\n\n\n\n
\n
General Considerations<\/strong><\/h3>\n\n\n\n
\n
\n
Entra Sync Considerations<\/strong><\/h3>\n\n\n\n
\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"){kind=icon}
<\/p><\/div>\n
\n
\n
\n
$uri = “https:\/\/graph.microsoft.com\/beta\/organization\/$orgid”
$body = @’
{
“onPremisesSyncEnabled”: ‘false’
}
‘@
invoke-MgGraphRequest -uri $uri -Body $body -Method PATCH
<\/p>\n<\/div><\/div>\n\n\n\n\n
<\/p><\/div>![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\"){kind=icon}
<\/p><\/div>iOS Considerations<\/strong><\/h3>\n\n\n\n
\n
Creating a new JumpCloud Application Integration<\/strong><\/h2>\n\n\n\n
\n
<\/p><\/div>\n
<\/p><\/div>\n
\n
Configuring the SSO Integration<\/strong><\/h2>\n\n\n\n
To configure JumpCloud<\/strong><\/h3>\n\n\n\n
<\/p><\/div>\n
\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/Snag_6c837c28.png\")
<\/li>\n<\/ul>\n<\/li>\n\n\n\n<\/p><\/div>![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/Snag_6ca30612.png\")
<\/figure>\n\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\"){kind=icon}
<\/p><\/div>To regenerate your Microsoft 365 IdP certificate<\/strong><\/h4>\n\n\n\n