- \n
- A JumpCloud administrator account<\/li>\n\n\n\n
- JumpCloud SSO Package or higher or SSO \u00e0 la carte option<\/li>\n\n\n\n
- A CrowdStrike user account with administrator permissions<\/li>\n\n\n\n
- Your CrowdStrike Region<\/li>\n<\/ul>\n\n\n\n
Creating a new JumpCloud Application Integration<\/strong><\/h2>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\"\/)
<\/p><\/div>Important:<\/strong> \nIf your data is stored outside of the US, check which login URL you should be using depending on your region. If your organization uses LDAP, RADIUS, or requires firewall allow list configuration, the Fully Qualified Domain Names (FQDNs) will also be region specific. See JumpCloud Data Centers<\/a> for the URLs, FQDNs, and IP addresses.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Go to Access <\/strong>> SSO<\/strong> Applications<\/strong>.<\/li>\n\n\n\n
- Click + Add New Application<\/strong>.<\/li>\n\n\n\n
- You can also enter the name of the application in the Search <\/strong>field and select it.<\/li>\n\n\n\n
- You can either select an application from the available list or select Custom Application<\/strong>, and click Next<\/strong>.<\/li>\n\n\n\n
- Select the required options from the Select Options<\/strong> page and click Next<\/strong>. The Enter General Info<\/strong> page is displayed.<\/li>\n\n\n\n
- On the Enter General Info<\/strong> page, you can customize the display label, description and how the application displays:\n
- \n
- Description<\/strong> – add a description that users will see in their user portal<\/li>\n\n\n\n
- User Portal Image<\/strong> – choose Logo <\/strong>or Color Indicator<\/strong><\/li>\n\n\n\n
- Show in User Portal<\/strong> – select to ensure the app is visible in the user portal<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Optionally, expand the Advanced Settings <\/strong>section and customize the IdP URL:\n
- \n
- Enter a custom value to replace the default application name in the SSO IdP URL endpoint ( https:\/\/sso.jumpcloud.com\/saml2\/{custom_value}<\/kbd>)<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\")
<\/p><\/div>Warning:<\/strong> \nThe SSO IdP URL<\/strong> is not editable after the application is created. If you need to change this URL later, you must delete and recreate the connector.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Click Save<\/strong> Application.<\/strong><\/li>\n\n\n\n
- Next, click:\n
- \n
- Configure Application<\/strong> and go to the next section <\/li>\n\n\n\n
- Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\")
<\/p><\/div>Tip:<\/strong> \nUsers are implicitly denied access to applications. See Authorize Users to an SSO Application<\/a>. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Configuring the SSO Integration<\/strong><\/h2>\n\n\n\n
To navigate to your JumpCloud SSO connector<\/strong><\/h3>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Important:<\/strong> \n
If your data is stored outside of the US, check which login URL you should be using depending on your region. If your organization uses LDAP, RADIUS, or requires firewall allow list configuration, the Fully Qualified Domain Names (FQDNs) will also be region specific. See JumpCloud Data Centers<\/a> for the URLs, FQDNs, and IP addresses.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Go to Access > SSO Applications<\/strong>. <\/li>\n\n\n\n
- Create a new application<\/a> or select it from the Configured Application<\/strong>s list.<\/li>\n\n\n\n
- Select the SSO<\/strong> tab.<\/li>\n<\/ol>\n\n\n\n
To configure JumpCloud<\/strong><\/h3>\n\n\n\n
- \n
- Replace any instances of YOUR_REGION with your CrowdStrike region.<\/li>\n\n\n\n
- Optionally, configure:<\/li>\n<\/ol>\n\n\n\nMFA Claims<\/a>\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nThe Authentication Methods References (AMR)<\/strong> is automatically included in the SAML assertion by default. No additional configuration is required to enable this.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Complete the MFA Claim Configuration<\/strong> to define how the authentication context is sent in the SAML assertion. <\/p>\n\n\n\n
- \n
- Under Auth Context<\/strong>, choose one of the following options based on your SP’s requirements:\n
- \n
- Send a single value for all successful MFA factors<\/strong> – select if the Service Provider accepts a generic confirmation for any MFA login. Enter the single URL or URN they accept<\/li>\n\n\n\n
- Send specific factors<\/strong> – select this option to map individual JumpCloud MFA methods to distinct values. In the Factor Mapping<\/strong> table, add each MFA factor enabled in your organization and enter the corresponding value required by the Service Provider<\/li>\n\n\n\n
- Send single value and specific factors<\/strong> – select to send both a generic identifier and<\/em> specific factor details in the assertion<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
<\/p><\/div>Tip:<\/strong> \nRefer to your Service Provider’s documentation to determine the specific URN or URL values required (e.g., Salesforce Session Security Levels). The values entered in this configuration must exactly match<\/strong> what the Service Provider expects.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
\n\n - Send specific factors<\/strong> – select this option to map individual JumpCloud MFA methods to distinct values. In the Factor Mapping<\/strong> table, add each MFA factor enabled in your organization and enter the corresponding value required by the Service Provider<\/li>\n\n\n\n
- Send a single value for all successful MFA factors<\/strong> – select if the Service Provider accepts a generic confirmation for any MFA login. Enter the single URL or URN they accept<\/li>\n\n\n\n
- Under Auth Context<\/strong>, choose one of the following options based on your SP’s requirements:\n
- Create a new application<\/a> or select it from the Configured Application<\/strong>s list.<\/li>\n\n\n\n
- Go to Access > SSO Applications<\/strong>. <\/li>\n\n\n\n
- Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
- Next, click:\n
- Click Save<\/strong> Application.<\/strong><\/li>\n\n\n\n
- User Portal Image<\/strong> – choose Logo <\/strong>or Color Indicator<\/strong><\/li>\n\n\n\n
- Click + Add New Application<\/strong>.<\/li>\n\n\n\n
- Go to Access <\/strong>> SSO<\/strong> Applications<\/strong>.<\/li>\n\n\n\n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n<\/ol>\n\n\n\n