JumpCloud
Identity Provider Setup¶
This document describes the steps to configure JumpCloud
as an Identity Provider to integrate with Cyderes. Cyderes will act as the SAML Service Provider or "SAML SP". Cyderes supports an SAML 2.0 with JumpCloud
.
Configuring SSO¶
Adding a New Application¶
- Log in to the
JumpCloud
organization admin console. - Click on the Applications link in the left side bar.
- Click on the + button in the left corner to add an application.
- Search for
**SAML**
in the Configure New Application search bar. Once you've found and selected SAML, click on the configure button on the right hand side. - In the New Application screen, first give the application a meaningful Display Label.
- Upload the Service Provider Metadata provided by Cyderes by clicking the Upload Metadata button. Once the XML metadata file is uploaded, the following fields should auto-populate based on the fields in the supplied metadata
SP Entity ID
,ACS URL
,SAMLSubject NameID
,SAMLSubject NameID Format
, andUser Attributes
. - Fill out the IdP Entity ID field. This can be any string value, but Cyderes recommends copying the value from the ACS URL field (should have been populated by the metadata upload).
- Choose values for IdP Private Key and IdP Certificate in the Inbound SAML configuration. Follow the instructions below to generate a private key and certificate using
OpenSSL
provided here. - Take the resulting
private.pem
andcert.pem
files and upload them to the application configuration inJumpCloud
. - Give the application an IdP URL value at the bottom of the Configure New Application screen.
- When ready select save to save the configuration and add the SAML application.
- Now that the application is created, assign the new SAML application to a group by selecting the Groups configuration from the left sidebar.
- Once the desired group has been selected, open its configuration settings. In the Applications tab, make sure the newly created SAML application is assigned to this user group.
- Click save group to save the changes.
Gather Information¶
Export the SAML XML metadata from the JumpCloud
application created above in step 10 to send to Cyderes.
- From the Applications menu in
JumpCloud
, select the check box next to the SAML application on the left hand side. - The export metadata button will now turn from gray to green in the upper right hand corner. Clicking that button will caused the XML metadata file to be downloaded by the browser.
- Send this XML file to Cyderes. We will add the metadata to our own IdP instance to enable third party federation between our IdP systems.