Learn how to connect JumpCloud with Better Stack to enable single sign-on (SSO) for you and your colleagues.

SSO setup

1. Go to Single Sign-On configuration.
2. Click Connect on the Generic SAML SSO panel and select JumpCloud.
3. Note the Entity ID and ACS URL. You will need them in a moment.

In JumpCloud

1. Sign in to the JumpCloud console as an admin.
2. In the left menu, go to SSO Application and click Add New Application.
3. Find the Custom Application tile and click Select.
4. Ensure that the integration supports SSO with SAML, then click Next.
5. Select Manage Single Sign-On (SSO), then click Next.
6. For Display Label, enter Better Stack and click Save Application.
7. Once saved, click Configure Application.
8. In the SSO tab, set IdP Entity ID to betterstack.
9. For SP Entity ID, use the Entity ID from Better Stack.
10. For ACS URLs, use the ACS URL from Better Stack for the Default URL.
11. Note the IDP URL. You will need this in a moment.
12. Under User Attributes, add the following attributes:
    • Service Provider Attribute email, JumpCloud Attribute email.
    • Service Provider Attribute first_name, JumpCloud Attribute firstname.
    • Service Provider Attribute last_name, JumpCloud Attribute lastname.
13. On the left, go to IDP Certificate Valid and click Download Certificate. You will need this file in a moment.
14. Go to the User Groups tab and select at least one group. The group must have a member with the same e-mail as on Better Stack for the setup to succeed.
15. Click Save to apply the changes.

In Better Stack

1. For Identity Provider Single Sign-On URL, use the IDP URL from JumpCloud.
2. Upload the certificate file you downloaded from JumpCloud.
3. Click Connect to confirm the configuration. You will be redirected to JumpCloud to sign in.

You're done. Your JumpCloud Single Sign-On is now configured.

Rotate your identity provider certificate

When you rotate the certificate in JumpCloud, replace it in Better Stack too:

1. Sign in to Better Stack as an admin before you switch certificates. Until you save the new one, new SSO sign-ins fail. Team members who are signed in stay signed in.
2. In JumpCloud, switch the Better Stack app to the new certificate and download it.
3. Go to Single Sign-On settings
4. Expand Advanced settings.
5. Click Upload next to X.509 Certificate and select the new certificate file.
6. Click Save changes.