- \n
- A JumpCloud administrator account<\/li>\n\n\n\n
- JumpCloud SSO Package or higher or SSO \u00e0 la carte option<\/li>\n\n\n\n
- Contact your Namely account manager or Namely support for instructions on generating a token for use with the integration<\/li>\n\n\n\n
- An administrator account in Namely with the appropriate permissions to use the Namely API<\/li>\n\n\n\n
- Your Namely subdomain<\/li>\n\n\n\n
- Access to the Namely REST API documentation if you will be setting up a custom integration<\/li>\n\n\n\n
- To configure SSO, you must have a Namely single sign-on (SSO) enabled subscription<\/li>\n<\/ul>\n\n\n\n
Important Considerations<\/strong><\/p>\n\n\n\n
- \n
- You can configure the integration for import only<\/a>, IdM<\/a> only, SSO<\/a> only, or for all 3 capabilities. See the appropriate section(s) below for detailed instructions.<\/li>\n<\/ul>\n\n\n\n
Creating a new JumpCloud Application Integration<\/strong><\/h2>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\"\/)
<\/p><\/div>Important:<\/strong> \nIf your data is stored outside of the US, check which login URL you should be using depending on your region. If your organization uses LDAP, RADIUS, or requires firewall allow list configuration, the Fully Qualified Domain Names (FQDNs) will also be region specific. See JumpCloud Data Centers<\/a> for the URLs, FQDNs, and IP addresses.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Go to Access <\/strong>> SSO<\/strong> Applications<\/strong>.<\/li>\n\n\n\n
- Click + Add New Application<\/strong>.<\/li>\n\n\n\n
- You can also enter the name of the application in the Search <\/strong>field and select it.<\/li>\n\n\n\n
- You can either select an application from the available list or select Custom Application<\/strong>, and click Next<\/strong>.<\/li>\n\n\n\n
- Select the required options from the Select Options<\/strong> page and click Next<\/strong>. The Enter General Info<\/strong> page is displayed.<\/li>\n\n\n\n
- On the Enter General Info<\/strong> page, you can customize the display label, description and how the application displays:\n
- \n
- Description<\/strong> – add a description that users will see in their user portal<\/li>\n\n\n\n
- User Portal Image<\/strong> – choose Logo <\/strong>or Color Indicator<\/strong><\/li>\n\n\n\n
- Show in User Portal<\/strong> – select to ensure the app is visible in the user portal<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Optionally, expand the Advanced Settings <\/strong>section and customize the IdP URL:\n
- \n
- Enter a custom value to replace the default application name in the SSO IdP URL endpoint ( https:\/\/sso.jumpcloud.com\/saml2\/{custom_value}<\/kbd>)<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\")
<\/p><\/div>Warning:<\/strong> \nThe SSO IdP URL<\/strong> is not editable after the application is created. If you need to change this URL later, you must delete and recreate the connector.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Click Save<\/strong> Application.<\/strong><\/li>\n\n\n\n
- Next, click:\n
- \n
- Configure Application<\/strong> and go to the next section <\/li>\n\n\n\n
- Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
Configuring an Import Only Integration<\/strong><\/h2>\n\n\n\n
There are two ways to create an integration that only supports importing users from Namely to JumpCloud. You can use the Namely application integration that utilizes SCIM API and protocol and has default field mappings, or you can create a custom integration that utilizes the Namely REST API and allows for custom field mappings.<\/p>\n\n\n\n
To navigate to your JumpCloud SCIM connector<\/strong><\/h3>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Important:<\/strong> \n
If your data is stored outside of the US, check which login URL you should be using depending on your region. If your organization uses LDAP, RADIUS, or requires firewall allow list configuration, the Fully Qualified Domain Names (FQDNs) will also be region specific. See JumpCloud Data Centers<\/a> for the URLs, FQDNs, and IP addresses.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Go to Access > SSO Applications<\/strong>. <\/li>\n\n\n\n
- Create a new application<\/a> or select it from the Configured Application<\/strong>s list.<\/li>\n\n\n\n
- Select the\u00a0Provisioning<\/strong>\u00a0tab.<\/li>\n<\/ol>\n\n\n\n
To configure Namely for importing only<\/strong> (SCIM API)<\/h3>\n\n\n\n
- \n
- Click Configure<\/strong>.<\/li>\n\n\n\n
- Uncheck Enable management of User Groups and Group Membership in this application<\/strong>.<\/li>\n\n\n\n
- Enter the SCIM API Base URL<\/strong> – https:\/\/SUBDOMAIN.namely.com\/api\/scim\/v2 <\/kbd>(e.g., https:\/\/thebestwidgets.namely.com\/api\/scim\/v2<\/kbd> ).<\/li>\n\n\n\n
- Enter the Personal Access Token you generated or received from Namely in the Token Key<\/strong> field.<\/li>\n\n\n\n
- Click Activate<\/strong>.<\/li>\n\n\n\n
- Do not associate any user groups.<\/li>\n\n\n\n
- Click save<\/strong>.<\/li>\n<\/ol>\n\n\n\n
<\/p><\/div>Warning:<\/strong> \nAssociating user groups will result in user identities being managed by JumpCloud in Namely.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
To create a custom<\/strong><\/strong> Namely integration for importing only<\/strong> (REST API)<\/h3>\n\n\n\n
- \n
- Click Custom API<\/strong>. <\/li>\n\n\n\n
- Select Bearer token<\/strong> as the Authentication method.<\/li>\n\n\n\n
- Enter the Namely REST API Base URL – <\/strong>https:\/\/SUBDOMAIN.namely.com\/api\/v1<\/kbd> (e.g., https:\/\/thebestwidgets.namely.com\/api\/v1<\/kbd> ).<\/li>\n\n\n\n
- Enter the Token Key<\/strong> you generated or received from Namely.<\/li>\n\n\n\n
- Enter profiles<\/kbd> in the Resource Location field.<\/li>\n\n\n\n
- Enter \/profiles<\/kbd> in the Endpoint Path field.<\/li>\n\n\n\n
- Select Body <\/strong>for Response Parameter Location.<\/li>\n\n\n\n
- Enter meta.total_count<\/kbd> for the Response Body JSON Path.<\/li>\n\n\n\n
- Enter per_page<\/kbd> for the Limit Name.<\/li>\n\n\n\n
- Enter page <\/kbd>for the Offset Name.<\/li>\n\n\n\n
- Click Test Connection<\/strong>.\n
- \n
- If the test connection fails, an error notification will slide out and the specific errors will show in the configuration. Please review the error messages. You may need to review the documentation or work with Namely support based on the error.<\/li>\n\n\n\n
- If the test connection is successful, a success notification will slide out and User Schema Attribute Mapping fields will appear.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Enter id <\/kbd>in the Unique ID field.<\/li>\n\n\n\n
- In the Service provider attribute JSON path field, enter email <\/kbd>for both the JumpCloud attributes Company Email <\/strong>and Username<\/strong>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nClick Preview <\/strong>to see a list of the JSON returned from Namely to complete your mappings and to verify that correct information will be added in JumpCloud.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Click Add attribute<\/strong> to map any other desired attributes you want to import from Namely to JumpCloud.<\/li>\n\n\n\n
- Click the trash can icon to delete any attributes you don\u2019t want imported.<\/li>\n\n\n\n
- Click Preview <\/strong>to verify that all the mapped information will be returned to JumpCloud.<\/li>\n\n\n\n
- Click Activate<\/strong>. <\/li>\n\n\n\n
- Click save<\/strong>.<\/li>\n<\/ol>\n\n\n\n
Example mappings for suggested attributes<\/strong><\/p>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/Namely-config-settings.jpg\")
<\/figure>\n\n\n\nConfiguring the SCIM<\/strong> Integration<\/strong><\/h2>\n\n\n\n
Use this option if you want JumpCloud to be the source of truth for your identities, or if you want a bi-directional sync between JumpCloud and Namely. Configuring identity management and associating user groups to the Namely application allows you to provision, update, and deprovision users from the JumpCloud Administrator Portal to Namely. Every change made to user attributes in JumpCloud will result in that same change being made to the user profile in Namely. You can also import users. <\/p>\n\n\n\n
To navigate to your JumpCloud SCIM connector<\/strong><\/h3>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Important:<\/strong> \n
If your data is stored outside of the US, check which login URL you should be using depending on your region. If your organization uses LDAP, RADIUS, or requires firewall allow list configuration, the Fully Qualified Domain Names (FQDNs) will also be region specific. See JumpCloud Data Centers<\/a> for the URLs, FQDNs, and IP addresses.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Go to Access > SSO Applications<\/strong>. <\/li>\n\n\n\n
- Create a new application<\/a> or select it from the Configured Application<\/strong>s list.<\/li>\n\n\n\n
- Select the\u00a0Provisioning<\/strong>\u00a0tab.<\/li>\n<\/ol>\n\n\n\n
To configure JumpCloud<\/h3>\n\n\n\n
- \n
- Click Configure<\/strong>.<\/li>\n\n\n\n
- Uncheck Enable management of User Groups and Group Membership in this application<\/strong>. <\/li>\n\n\n\n
- Enter the SCIM API Base URL<\/strong> – https:\/\/SUBDOMAIN.namely.com\/api\/scim\/v2<\/kbd> (e.g., https:\/\/thebestwidgets.namely.com\/api\/scim\/v2 <\/kbd>).<\/li>\n\n\n\n
- Enter the Token Key<\/strong> you generated or received from Namely.<\/li>\n\n\n\n
- Review and edit any user attribute mappings<\/a>.<\/li>\n\n\n\n
- Click Activate<\/strong>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\")
<\/p><\/div>Tip:<\/strong> \nAre you a visual learner? Watch our Demo – Integration with Namely<\/a> video.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Attribute Mappings<\/strong><\/h2>\n\n\n\n
The Export Attributes Mapping table lists the Required and Optional Mappings that JumpCloud sends to the Service Provider. See Attribute Considerations<\/a> for more information regarding attribute mapping considerations. <\/p>\n\n\n\n
- Uncheck Enable management of User Groups and Group Membership in this application<\/strong>. <\/li>\n\n\n\n
- Create a new application<\/a> or select it from the Configured Application<\/strong>s list.<\/li>\n\n\n\n
- Go to Access > SSO Applications<\/strong>. <\/li>\n\n\n\n
- In the Service provider attribute JSON path field, enter email <\/kbd>for both the JumpCloud attributes Company Email <\/strong>and Username<\/strong>.<\/li>\n<\/ol>\n\n\n\n
- Select Bearer token<\/strong> as the Authentication method.<\/li>\n\n\n\n
- Uncheck Enable management of User Groups and Group Membership in this application<\/strong>.<\/li>\n\n\n\n
- Create a new application<\/a> or select it from the Configured Application<\/strong>s list.<\/li>\n\n\n\n
- Go to Access > SSO Applications<\/strong>. <\/li>\n\n\n\n
- Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
- Next, click:\n
- Click Save<\/strong> Application.<\/strong><\/li>\n\n\n\n
- User Portal Image<\/strong> – choose Logo <\/strong>or Color Indicator<\/strong><\/li>\n\n\n\n
- Click + Add New Application<\/strong>.<\/li>\n\n\n\n
- Go to Access <\/strong>> SSO<\/strong> Applications<\/strong>.<\/li>\n\n\n\n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n<\/ol>\n\n\n\n
- You can configure the integration for import only<\/a>, IdM<\/a> only, SSO<\/a> only, or for all 3 capabilities. See the appropriate section(s) below for detailed instructions.<\/li>\n<\/ul>\n\n\n\n