Fluent Commerce Logo
Docs
Sign In

SSO: Configure JumpCloud connection via SAML

How-to Guide

Author:

Fluent Commerce

Changed on:

8 Oct 2024

Key Points

  • It is possible to use the generic SAML configuration to add an external identity provider that follows the SAML standard
  • This page provides a guide on how to configure an external identity provider via SAML configuration.

Steps

Step arrow right iconStep 1.

Go to JumpCloud. If one doesn’t have a JumpCloud account, they can create one.

Step arrow right iconStep 2.

On the left menu click SSO and then click on Plus Button.

No alt provided

Step arrow right iconStep 3.

On the Configure New SSO Application drawer click on Custom SAML App button.

No alt provided

Step arrow right iconStep 4.

On the General Info tab of New Application drawer enter application name into Display Label field.

No alt provided

Step arrow right iconStep 5.

Switch to the SSO tab. Here we need to fill IdP Entity ID, SP Entity ID and ACS URL fields.

No alt provided

Step arrow right iconStep 6.

To fill the values from the previous step we need to create External IdP in PingOne.

Step arrow right iconStep 7.

Go to Connections → External IDPs.

Step arrow right iconStep 8.

Click + Add Provider.

No alt provided

Step arrow right iconStep 9.

Click SAML.

No alt provided

Step arrow right iconStep 10.

On the Create Profile screen, enter the following

  • Name. A unique identifier for the identity provider.
  • Description (optional). A brief characterization of the identity provider.
  • Icon (optional). An image to represent the identity provider. Use a file up to 1MB in JPG, JPEG, GIF, or PNG format.
  • Login button (optional). An image to be used for the login button that the end user will see. Use a 300 X 42 pixel image.

Step arrow right iconStep 11.

Click Continue.

No alt provided

Step arrow right iconStep 12.

On the Configure PingOne Connection screen copy PingOne (SP) entity ID and put the value into the IdP Entity ID, SP Entity ID fields on the New Application drawer in JumpCloud (see step 5).

No alt provided

Step arrow right iconStep 13.

Click Continue.

Step arrow right iconStep 14.

On the Configure IDP Connection screen copy ACS ENDPOINT and fill the copied value into the ACS URL field on the New Application drawer in JumpCloud (see step 5).

No alt provided

Step arrow right iconStep 15.

Go to JumpCloud and on the New Application drawer change value in SAML Subject NameID to the username value.

No alt provided

Step arrow right iconStep 16.

Switch to the User Groups tab and select groups which will have access to the application.

No alt provided

Step arrow right iconStep 17.

Click on the activate button and then confirm your new SSO connector instance (click on the continue button).

No alt provided

Step arrow right iconStep 18.

After the application is successfully created, it is necessary to export Metadata:

  • In JumpCloud click SSO
  • select your created application in the list
  • switch to the SSO tab on the opened drawer
  • click on Export Metadata button -> file containing data is downloaded to the computer.
No alt provided

Step arrow right iconStep 19.

Go back to PingOne and select option Import Metadata on Configure IDP Connection screen, click on the Choose button and then select downloaded file.

No alt providedNo alt provided

Step arrow right iconStep 20.

Click Save and Continue.

Step arrow right iconStep 21.

On Map Attributes screen click on the Save&Finish button.

No alt provided

Step arrow right iconDont't forget

  • Enable the External Identity Provider.
  • Create a new Authentication Policy and add the newly created External Identity Provider to it.
No alt provided
  • Add the Authentication Policy to the application.
No alt provided
Fluent Commerce

Fluent Commerce

Copyright © 2024 Fluent Retail Pty Ltd (trading as Fluent Commerce). All rights reserved. No materials on this docs.fluentcommerce.com site may be used in any way and/or for any purpose without prior written authorisation from Fluent Commerce. Current customers and partners shall use these materials strictly in accordance with the terms and conditions of their written agreements with Fluent Commerce or its affiliates.

Fluent Logo