# JumpCloud

{% hint style="info" %}
This feature is available in the **Premium plan and higher**.
{% endhint %}

{% hint style="danger" %}
**Remember to** [**grant your JumpCloud users access permissions**](#step-3-managing-user-access) **to GoodAccess. Users without them won't be able to log in.**
{% endhint %}

## Step 1 - Adding a new identity provider

[Log in to the GoodAccess **Control Panel**, and go to **Settings** > **SSO & Identity**.](https://app.goodaccess.com/sso-and-identity/)

Click **+ Add provider**, enter the **Provider name**, choose your **Identity Provider**, and click **Continue**.

## Step 2 - Setting up Single Sign-On with SAML

Log in to the [JumpCloud Admin console](https://console.jumpcloud.com/login/admin), and go to **User Authentication** > **SSO Applications**.

Click **+ Add New Application**, select **Custom Application**, and click **Next**.

Select **Manage Single Sign-On (SSO)** > **Configure SSO with SAML**, and click **Next**.

Give the application a name, and click **Save Application**.

Click **Configure Application**.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FhB4nDig0Ay2U4eUt2gLW%2FFeatures_SSO_JumpCloud_01.png?alt=media&#x26;token=0bbb96da-673d-426e-b1b0-b427a4f9d99d" alt="JumpCloud Admin console with key steps to adding a new custom SAML application."><figcaption><p>Adding a new custom SAML application</p></figcaption></figure>

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FEYubVoYhNArKDfCx7yyD%2FFeatures_SSO_JumpCloud_02.png?alt=media&#x26;token=b148f778-3b5d-4809-8249-6b0ab794bdd1" alt="JumpCloud Admin console with key steps to adding a new custom SAML application."><figcaption><p>Adding a new custom SAML application</p></figcaption></figure>

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FVgPX8fhiuQsu7N1DwlKs%2FFeatures_SSO_JumpCloud_03.png?alt=media&#x26;token=46cc08c1-e48c-4661-b11f-bdadce074859" alt="JumpCloud Admin console with key steps to adding a new custom SAML application."><figcaption><p>Adding a new custom SAML application</p></figcaption></figure>

### 1. Single Sign-On Configuration

Copy the details from GoodAccess - **(2) GoodAccess links**.

* **SP Entity ID** - Entity ID
* **ACS URLs** - Assertion Consumer Service URL
* **SAMLSubject NameID** - email
* **SAMLSubject NameID Format** - urn:oasis:names:tc:**SAML:2.0**:nameid-format:**unspecified**
* **Signature Algorithm** - RSA-SHA256
* **Default Relay State** - Relay State
* **Login URL** - Login URL

Return to GoodAccess, and click **Continue**.

Return to JumpCloud.

### 2. Attributes

Click **add attribute**, and add the following attribute:

| Service Provider Attribute Name | JumpCloud Attribute Name |
| ------------------------------- | ------------------------ |
| "email" (without quotes)        | email                    |

### 3. Setting up GoodAccess

Click **Copy Metadata URL**, and open the URL in a new tab.

Copy the details to GoodAccess - **(3) Identity Provider links**, and click **Continue**.

* **Sign in URL** - IDP URL
* **Entity ID** - IdP Entity ID (choose a name)
* **X509 signing certificate** - Copy the certificate from the new tab

Return to JumpCloud, and click **Save**.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FwSI5pqoAzXuuhP3R77Kx%2FFeatures_SSO_JumpCloud_04.png?alt=media&#x26;token=774345a9-bf71-4db9-95e4-3b46b9f6baca" alt="JumpCloud Admin console with key steps to setting up Single Sign-On."><figcaption><p>Setting up Single Sign-On</p></figcaption></figure>

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2F5HcEP42ILfraXNu8q2hJ%2FFeatures_SSO_JumpCloud_05.png?alt=media&#x26;token=c9f08a9b-3dd5-445b-a70d-102bc638e981" alt="JumpCloud Admin console with key steps to setting up Single Sign-On."><figcaption><p>Setting up Single Sign-On</p></figcaption></figure>

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2F40u3dtbBSOvN7S00HMNg%2FFeatures_SSO_JumpCloud_06.png?alt=media&#x26;token=642e3a46-da3d-4c2e-8186-c3d454fd7d9f" alt="XML file in web browser highlighting the X509 signing certificate."><figcaption><p>Copying the certificate from the new tab</p></figcaption></figure>

{% hint style="info" %}
If you don't want to setup SCIM, skip the next step in GoodAccess, and click **Submit** to finish the configuration.
{% endhint %}

You have now successfully set up your JumpCloud SSO with GoodAccess.

## Step 3 (optional) - Setting up SCIM

In the application, go to **Identity Management**.

Copy the **URL** and **Token** from GoodAccess - **(4) User provisioning (SCIM)**.

* **API Type** - SCIM API
* **SCIM Version** - SCIM 2.0
* **Base URL** - URL
* **Token Key** - Token
* **Test User Email** - Enter any email address (e.g. <test@test.com>)

Return to GoodAccess, and click **Submit**.

Return to JumpCloud, and click **Test Connection**.

Click **Activate**, and **Save** to finish the configuration.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2F8BdsJWqkmjU2WmQGoO31%2FFeatures_SSO_JumpCloud_07.png?alt=media&#x26;token=28c024ce-2204-4225-bc36-255233a58ed2" alt="JumpCloud Admin console with key steps to setting up SCIM."><figcaption><p>Setting up SCIM</p></figcaption></figure>

{% hint style="info" %}
The whole provisioning process will take around **20 minutes** to complete depending on the number of members and groups being added.
{% endhint %}

You have now successfully set up JumpCloud SCIM with GoodAccess.

## Step 4 - Managing user access

In the application, go to **User Groups**.

Choose who should have access, and click **Save**.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FUnvOhglp8LOfG4Xr4KoF%2FFeatures_SSO_JumpCloud_07.png?alt=media&#x26;token=c9ee38c8-2fd8-4149-a148-0ae8cafbf3c0" alt="JumpCloud Admin console with key steps to managing user access."><figcaption><p>Managing user access</p></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://support.goodaccess.com/configuration-guides/features/sso-scim/jumpcloud.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.