# JumpCloud

{% hint style="info" %}
This feature is available in the **Premium plan and higher**.
{% endhint %}

{% hint style="danger" %}
**Remember to** [**grant your JumpCloud users access permissions**](#step-3-managing-user-access) **to GoodAccess. Users without them won't be able to log in.**
{% endhint %}

## Step 1 - Adding a new identity provider

[Log in to the GoodAccess **Control Panel**, and go to **Settings** > **SSO & Identity**.](https://app.goodaccess.com/sso-and-identity/)

Click **+ Add provider**, enter the **Provider name**, choose your **Identity Provider**, and click **Continue**.

## Step 2 - Setting up Single Sign-On with SAML

Log in to the [JumpCloud Admin console](https://console.jumpcloud.com/login/admin), and go to **User Authentication** > **SSO Applications**.

Click **+ Add New Application**, select **Custom Application**, and click **Next**.

Select **Manage Single Sign-On (SSO)** > **Configure SSO with SAML**, and click **Next**.

Give the application a name, and click **Save Application**.

Click **Configure Application**.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FhB4nDig0Ay2U4eUt2gLW%2FFeatures_SSO_JumpCloud_01.png?alt=media&#x26;token=0bbb96da-673d-426e-b1b0-b427a4f9d99d" alt="JumpCloud Admin console with key steps to adding a new custom SAML application."><figcaption><p>Adding a new custom SAML application</p></figcaption></figure>

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FEYubVoYhNArKDfCx7yyD%2FFeatures_SSO_JumpCloud_02.png?alt=media&#x26;token=b148f778-3b5d-4809-8249-6b0ab794bdd1" alt="JumpCloud Admin console with key steps to adding a new custom SAML application."><figcaption><p>Adding a new custom SAML application</p></figcaption></figure>

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FVgPX8fhiuQsu7N1DwlKs%2FFeatures_SSO_JumpCloud_03.png?alt=media&#x26;token=46cc08c1-e48c-4661-b11f-bdadce074859" alt="JumpCloud Admin console with key steps to adding a new custom SAML application."><figcaption><p>Adding a new custom SAML application</p></figcaption></figure>

### 1. Single Sign-On Configuration

Copy the details from GoodAccess - **(2) GoodAccess links**.

* **SP Entity ID** - Entity ID
* **ACS URLs** - Assertion Consumer Service URL
* **SAMLSubject NameID** - email
* **SAMLSubject NameID Format** - urn:oasis:names:tc:**SAML:2.0**:nameid-format:**unspecified**
* **Signature Algorithm** - RSA-SHA256
* **Default Relay State** - Relay State
* **Login URL** - Login URL

Return to GoodAccess, and click **Continue**.

Return to JumpCloud.

### 2. Attributes

Click **add attribute**, and add the following attribute:

| Service Provider Attribute Name | JumpCloud Attribute Name |
| ------------------------------- | ------------------------ |
| "email" (without quotes)        | email                    |

### 3. Setting up GoodAccess

Click **Copy Metadata URL**, and open the URL in a new tab.

Copy the details to GoodAccess - **(3) Identity Provider links**, and click **Continue**.

* **Sign in URL** - IDP URL
* **Entity ID** - IdP Entity ID (choose a name)
* **X509 signing certificate** - Copy the certificate from the new tab

Return to JumpCloud, and click **Save**.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FwSI5pqoAzXuuhP3R77Kx%2FFeatures_SSO_JumpCloud_04.png?alt=media&#x26;token=774345a9-bf71-4db9-95e4-3b46b9f6baca" alt="JumpCloud Admin console with key steps to setting up Single Sign-On."><figcaption><p>Setting up Single Sign-On</p></figcaption></figure>

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2F5HcEP42ILfraXNu8q2hJ%2FFeatures_SSO_JumpCloud_05.png?alt=media&#x26;token=c9f08a9b-3dd5-445b-a70d-102bc638e981" alt="JumpCloud Admin console with key steps to setting up Single Sign-On."><figcaption><p>Setting up Single Sign-On</p></figcaption></figure>

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2F40u3dtbBSOvN7S00HMNg%2FFeatures_SSO_JumpCloud_06.png?alt=media&#x26;token=642e3a46-da3d-4c2e-8186-c3d454fd7d9f" alt="XML file in web browser highlighting the X509 signing certificate."><figcaption><p>Copying the certificate from the new tab</p></figcaption></figure>

{% hint style="info" %}
If you don't want to setup SCIM, skip the next step in GoodAccess, and click **Submit** to finish the configuration.
{% endhint %}

You have now successfully set up your JumpCloud SSO with GoodAccess.

## Step 3 (optional) - Setting up SCIM

In the application, go to **Identity Management**.

Copy the **URL** and **Token** from GoodAccess - **(4) User provisioning (SCIM)**.

* **API Type** - SCIM API
* **SCIM Version** - SCIM 2.0
* **Base URL** - URL
* **Token Key** - Token
* **Test User Email** - Enter any email address (e.g. <test@test.com>)

Return to GoodAccess, and click **Submit**.

Return to JumpCloud, and click **Test Connection**.

Click **Activate**, and **Save** to finish the configuration.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2F8BdsJWqkmjU2WmQGoO31%2FFeatures_SSO_JumpCloud_07.png?alt=media&#x26;token=28c024ce-2204-4225-bc36-255233a58ed2" alt="JumpCloud Admin console with key steps to setting up SCIM."><figcaption><p>Setting up SCIM</p></figcaption></figure>

{% hint style="info" %}
The whole provisioning process will take around **20 minutes** to complete depending on the number of members and groups being added.
{% endhint %}

You have now successfully set up JumpCloud SCIM with GoodAccess.

## Step 4 - Managing user access

In the application, go to **User Groups**.

Choose who should have access, and click **Save**.

<figure><img src="https://418253935-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FiJ406Lpi9EKoWDi7GFL7%2Fuploads%2FUnvOhglp8LOfG4Xr4KoF%2FFeatures_SSO_JumpCloud_07.png?alt=media&#x26;token=c9ee38c8-2fd8-4149-a148-0ae8cafbf3c0" alt="JumpCloud Admin console with key steps to managing user access."><figcaption><p>Managing user access</p></figcaption></figure>