# JumpCloud SSO

Learn how to connect JumpCloud with Better Stack to enable single sign-on (SSO) for you and your colleagues.

### SSO setup

1.  Go to [Single Sign-On configuration](https://betterstack.com/settings/sso ";_blank").
2.  Click **Connect** on the **Generic SAML SSO** panel and select **JumpCloud**.
3.  Note the **Entity ID** and **ACS URL**. You will need them in a moment.

### In JumpCloud

1.  Sign in to the JumpCloud console as an admin.
2.  In the left menu, go to **SSO Application** and click **Add New Application**.
3.  Find the **Custom Application** tile and click **Select**.
4.  Ensure that the integration supports **SSO with SAML**, then click **Next**.
5.  Select **Manage Single Sign-On (SSO)**, then click **Next**.
6.  For **Display Label**, enter `Better Stack` and click **Save Application**.
7.  Once saved, click **Configure Application**.
8.  In the **SSO** tab, set **IdP Entity ID** to `betterstack`.
9.  For **SP Entity ID**, use the **Entity ID** from Better Stack.
10. For **ACS URLs**, use the **ACS URL** from Better Stack for the **Default URL**.
11. Note the **IDP URL**. You will need this in a moment.
12. Under **User Attributes**, add the following attributes:
    *   **Service Provider Attribute** `email`, **JumpCloud Attribute** `email`.
    *   **Service Provider Attribute** `first_name`, **JumpCloud Attribute** `firstname`.
    *   **Service Provider Attribute** `last_name`, **JumpCloud Attribute** `lastname`.
13. On the left, go to **IDP Certificate Valid** and click **Download Certificate**. You will need this file in a moment.
14. Go to the **User Groups** tab and select at least one group. The group must have a member with the same email as on Better Stack for the setup to succeed.
15. Click **Save** to apply the changes.

### In Better Stack

1.  For **Identity Provider Single Sign-On URL**, use the **IDP URL** from JumpCloud.
2.  Upload the certificate file you downloaded from JumpCloud.
3.  Click **Connect** to confirm the configuration. You will be redirected to JumpCloud to sign in.

You're done. Your JumpCloud Single Sign-On is now configured.