---
title: Jumpcloud
slug: jumpcloud
docTags: 
createdAt: 2023-05-24T08:04:57.000Z
---

# Setup with Jumpcloud as SAML Identity Provider

## Jumpcloud settings

1. Sign in to the [Jumpcloud Console](https://console.jumpcloud.com)
2. Go to **USER AUTHENTICATION > SSO**
3. Click ( **+ Add New Application**) to configure a new application
4. Select **Custom SAML App**
5. **IDP Entity ID&#x20;**&#x69;s to be set to **https\://sso.jumpcloud.com/saml2/echoes**
6. **SP Entity ID&#x20;**&#x76;alue is the one given by Echoes **Entity ID/SAML Audience&#x20;**&#x66;ield
7. **ACS URLs value&#x20;**&#x69;s the one given by Echoes **Assertion Consumer Service URL&#x20;**&#x66;ield
8. **SAMLSubject NameID** is to be **email**
9. **IDP URL&#x20;**&#x69;s to be set to **https\://sso.jumpcloud.com/saml2/echoes**
10. Add the required attributes (see below for the list and their mapping)
11. Clic&#x6B;**&#x20;Activate&#x20;**&#x74;o save and generate the certificate
12. Download the certificate given by Jumpcloud (needed to configure Echoes later on)
13. Give your [Jumpcloud users, access to the Echoes application](https://support.jumpcloud.com/support/s/article/authorize-users-to-an-sso-application-2019-08-21-10-36-47) once configured&#x20;

![SAML configuration](https://api.archbee.com/api/optimize/cnN9HGi_h1eJLSFAvJkF4/j4ihrWzuAxNAp4JFd3giV_screenshot-2023-05-24-at-105558.png "SAML configuration")

The Attributes required by Echoes are to be mapped as follow:

![SAML attributes](https://api.archbee.com/api/optimize/cnN9HGi_h1eJLSFAvJkF4/KrGKdVB-qS8sPnYxIgOkk_screenshot-2023-05-24-at-110047.png "SAML attributes")

## Echoes settings

### SAML Sign-in URL&#x20;

Identity Provider Single Sign-On URL value: **https\://sso.jumpcloud.com/saml2/echoes**

### Public Key x.509 Certificate&#x20;

The certificate downloaded from the Jumpcloud console after having activated the application.

## IdP-initiated SSO

The IDP initiated flow is supported by Echoes.

For instance you may give access to the Echoes application to some part of your Organization. It will then be accessible via the [Jumpcloud User Portal](https://console.jumpcloud.com/userconsole).
