JumpCloud SSO

In this guide, you're going to learn how to connect JumpCloud with Better Stack to enable single sign-on (SSO) for you and your colleagues.

SSO set-up walkthrough

1. Start the SSO set-up by going to Single Sign-On configuration. Note that only organization admins have access to these settings.

2. On this page click Connect on the Generic SAML SSO panel.

3. Select JumpCloud from the list of supported providers.

4. Take note of the value in the Entity ID and ACS URL fields, we're going to need this in a second.

We're going to switch to the JumpCloud console now.

1. Sign in to the JumpCloud console as an admin.

2. In the left menu, select SSO Application.

3. Click Add New Application.

4. Find the Custom Application tile and click Select.

5. Ensure that the integration supports SSO with SAML, then click Next.

6. You are presented with a set of features. Select Manage Single Sign-On (SSO), then click Next.

7. In the Display Label field, enter "Better Stack".

8. Click Save Application.

9. Once saved, click Configure Application.

10. In the SSO tab, fill IdP Entity ID with betterstack.

11. Fill the SP Entity ID field with the Entity ID copied from Better Stack.

12. Under ACS URLs fill the Default URL with the ACS URL from Better Stack.

13. Take note of the IDP URL, we're going to need this in a second.

14. Under User Attributes, add the following attributes:

    • Service Provider Attribute email, JumpCloud Attribute email.
    • Service Provider Attribute first_name, JumpCloud Attribute firstname.
    • Service Provider Attribute last_name, JumpCloud Attribute lastname.

15. On the left, click IDP Certificate Valid, then click Download Certificate. Take note of this file, we'll need it in a second.

16. Click the User Groups tab above, and select at least one group. For the initial setup to succeed, the group must have a member with the same email address that you use on Better Stack.

17. Click Save to apply the changes.

We're returning to Better Stack now.

1. Back on Better Stack, fill Identity Provider Single Sign-On URL with the IDP URL from JumpCloud.

2. Under X.509 Certificate, click Upload and select the certificate file from JumpCloud.

3. Click Connect to confirm the configuration. You will be redirected to JumpCloud. Sign in with the account you assigned to the Better Stack application, please.

Tada! Your JumpCloud Single Sign-On is now configured!