SP Entity ID*<\/strong><\/h3>\n\n\n\nThis is the unique, case-sensitive<\/strong> identifier used by the SP. The SP will likely supply you with this value. <\/p>\n\n\n\nIt may also be referred to as:<\/p>\n\n\n\n
\n- Audience<\/li>\n\n\n\n
- Entity ID<\/li>\n\n\n\n
- Identifier<\/li>\n\n\n\n
- Service Provider Issuer<\/li>\n\n\n\n
- Audience Restriction<\/li>\n<\/ul>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\")
<\/p><\/div>
Tip:<\/strong> \nIn the SP metadata file, the SP Entity ID is the entityID<\/strong> attribute value of the EntityDescriptor<\/strong> element.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\nACS URLs *<\/strong><\/h3>\n\n\n\nThis is the endpoint to which JumpCloud will send SAML Responses (containing Assertions). JumpCloud supports multiple ACS URLs. The SP will supply you with this value and may refer to it as:<\/p>\n\n\n\n
\n- Destination<\/li>\n\n\n\n
- Recipient<\/li>\n\n\n\n
- SAML Assertion Endpoint URL<\/li>\n\n\n\n
- ACS URL, Assertion Consumer Service URL<\/li>\n\n\n\n
- Consume URL<\/li>\n<\/ul>\n\n\n\n
<\/p><\/div>
Tip:<\/strong> \nIn the SP metadata file, the ACS URL is the location<\/strong> attribute value of the AssertionConsumerService<\/strong> element. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\nSP Certificate*<\/strong><\/h3>\n\n\n\nThis is the public certificate used by SPs for SAML Requests. If you can download the SP\u2019s public certificate, please do so and upload it here. If you have the SP\u2019s metadata file, it may contain the certificate in the X509 Certificate<\/strong> element. If so, you may copy and paste the certificate contents into a file and upload it to your JumpCloud configuration. Ensure that the SP\u2019s certificate is Base64 encoded before you upload it.<\/p>\n\n\n\nSAMLSubject NameID*<\/strong><\/h3>\n\n\n\nThis is the user identifier that will be sent as the SAMLSubject’s NameID. By default, the SAMLSubject\u2019s NameID is the user’s email. You can change it to username<\/strong>, firstname<\/strong>, lastname<\/strong>, or description<\/strong>, but only change this value if the SP requires a NameID other than email. Use description<\/strong> if you need to use an alternate value for emailaddress<\/strong>, username<\/strong>, firstname<\/strong>, or lastname<\/strong>. <\/p>\n\n\n\nSAMLSubject NameID Format*<\/strong><\/h3>\n\n\n\nThis is the format that will be sent for the SAMLSubject’s NameID. Only change this value if the SP requires a specific NameID format.<\/p>\n\n\n\n
Signature Algorithm*<\/strong><\/h3>\n\n\n\nJumpCloud SSO SAML connectors support SHA-256 certificates by default. Although JumpCloud supports SHA-1 certificates, we recommend using SHA-256 for stronger security. <\/p>\n\n\n\n
Sign<\/strong>*<\/h3>\n\n\n\nSigning a SAML authentication response or SAML authentication assertion ensures message integrity when delivered to the SP. There are three choices:<\/p>\n\n\n\n
\n- Response <\/strong>– this is the default setting. All SAML authentication responses from JumpCloud to the SP will be signed. The response can be validated by the SP using JumpCloud’s signing certificate (X.509 Certificate) that has been uploaded to the SSO connector.<\/li>\n\n\n\n
- Assertion <\/strong>– the attribute statement within the response is signed. This adds another layer of security where JumpCloud will encrypt the assertion using the SP’s public certificate and sends it to the SP who will decrypt it using the private key. <\/li>\n\n\n\n
- Assertion and Response<\/strong> – both assertions and responses are signed.<\/li>\n<\/ol>\n\n\n\n
Default RelayState <\/strong><\/h3>\n\n\n\nEnter a value that designates the default location to which your users will be redirected after single sign-on is complete. It will be sent by JumpCloud as the RelayState either in IdP-initiated SSO or if no RelayState is received from the SP during SP-initiated flow. <\/p>\n\n\n\n
The SP may supply you with this value and refer to it as:<\/p>\n\n\n\n
\n- Target URL<\/li>\n\n\n\n
- RelayState<\/li>\n\n\n\n
- Target<\/li>\n<\/ul>\n\n\n\n
Login URL<\/strong><\/h3>\n\n\n\nIf this application only supports SP initiated authentication, insert the URL users need to log in to this application.<\/p>\n\n\n\n
IDP URL*<\/strong><\/h3>\n\n\n\nThe IDP URL is the location to which the SP will send SAML requests and at which a user will authenticate. Please change this value to a plaintext string unique to the SP. The value you input will serve as the end of the IDP URL. <\/p>\n\n\n\n
The SP will require the IDP URL and may refer to it as:<\/p>\n\n\n\n
\n- Identity Provider Target URL<\/li>\n\n\n\n
- SSO Login URL<\/li>\n\n\n\n
- Redirect URL<\/li>\n\n\n\n
- Identity Provider Endpoint<\/li>\n<\/ul>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>
Note:<\/strong> \nTake note of the entire URL (including the portion you edited) for later use.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
<\/p><\/div>
Tip:<\/strong> \nSometimes the SP has an optional field for an IDP Logout URL. Use https:\/\/console.jumpcloud.com\/userconsole\/<\/kbd> to send users back to the user console after they logout.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\nDeclare Redirect Endpoint<\/strong><\/h3>\n\n\n\nSelect this option only if the SP requires that your IDP metadata file contains a redirect endpoint.<\/p>\n\n\n\n
Attributes<\/strong><\/h3>\n\n\n\nUser Attributes<\/strong><\/h4>\n\n\n\nConfigure user attributes to be sent to the SP in assertions. User attributes are unique to each user. You can include attributes for standard user detail attributes or for custom attributes. For example, you can include standard attributes for users\u2019 employee ID and department, or you can include a custom attribute for users\u2019 application ID. Standard attributes are configured in the User Panel Details tab’s User Information<\/strong> and Employee Information<\/strong> sections.<\/strong><\/p>\n\n\n\nConstant Attributes<\/strong><\/h4>\n\n\n\nConfigure any constant-value attributes to be sent to the SP in assertions. The same values will be sent for all users. For example, a constant attribute for session duration limits session times for all users of the application, or SP.<\/p>\n\n\n\n
\n- Click add attribute<\/strong> to add a constant attribute. To remove an attribute, click the trash<\/strong> icon.<\/li>\n<\/ul>\n\n\n\n
Include Group Attribute <\/strong><\/h4>\n\n\n\nSelect to include the groups a user is a member of in SAML assertions. When this option is selected, all groups that connect the user to the application are included in assertions to that application. The Groups Attribute Name<\/strong> is the SP’s name of the group attribute. By default, the attribute name is memberOf<\/kbd>.<\/p>\n\n\n\n\n- When this option is selected, you must include a Groups Attribute Name<\/strong>. You will receive an error when you attempt to activate (create) or save (edit) the connector if you select this option and leave Groups Attribute Name<\/strong> blank.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
Use JumpCloud SAML Single Sign On (SSO) to give your users convenient but secure access to all their web applications […]<\/p>\n","protected":false},"author":205,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"2normal","inline_featured_image":false,"footnotes":""},"support_category":[2855,2902],"support_tag":[],"coauthors":[2839],"acf":[],"yoast_head":"\n
SSO Application Connector Fields - JumpCloud<\/title>\n<meta name=\"description\" content=\"Understand the fields used when configuring Single Sign On (SSO) with external service provider applications in JumpCloud.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SSO Application Connector Fields\" \/>\n<meta property=\"og:description\" content=\"Understand the fields used when configuring Single Sign On (SSO) with external service provider applications in JumpCloud.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-20T16:49:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"7 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"joyjaswinski\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields\",\"url\":\"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields\",\"name\":\"SSO Application Connector Fields - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-07-12T22:47:00+00:00\",\"dateModified\":\"2024-03-20T16:49:44+00:00\",\"description\":\"Understand the fields used when configuring Single Sign On (SSO) with external service provider applications in JumpCloud.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SSO Application Connector Fields\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SSO Application Connector Fields - JumpCloud","description":"Understand the fields used when configuring Single Sign On (SSO) with external service provider applications in JumpCloud.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields","og_locale":"en_US","og_type":"article","og_title":"SSO Application Connector Fields","og_description":"Understand the fields used when configuring Single Sign On (SSO) with external service provider applications in JumpCloud.","og_url":"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields","og_site_name":"JumpCloud","article_modified_time":"2024-03-20T16:49:44+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"7 minutes","Written by":"joyjaswinski"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields","url":"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields","name":"SSO Application Connector Fields - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-07-12T22:47:00+00:00","dateModified":"2024-03-20T16:49:44+00:00","description":"Understand the fields used when configuring Single Sign On (SSO) with external service provider applications in JumpCloud.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/sso-application-connector-fields"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/sso-application-connector-fields#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"SSO Application Connector Fields"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/91619"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/205"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/91619\/revisions"}],"predecessor-version":[{"id":107387,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/91619\/revisions\/107387"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=91619"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=91619"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=91619"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=91619"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\")
<\/p><\/div>![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\"){kind=icon}
<\/p><\/div>