¶ JumpCloud SCIM/SAML SSO Integration
Exium’s Intelligent Cybersecurity Mesh provides secure access to distributed workforce and IoT devices, protecting businesses from malware, ransomware, phishing, denial of service, and botnet infections in one easy to use cloud service.
JumpCloud Exium integration handles users seamless access to Exium. Administrators can easily attach Exium security policy groups to JumpCloud users. Unique features of this integration are
- Simple steps to integrate JumpCloud API with Exium
- Push New Users from JumpCloud to Exium
- Push User Profile Updates from JumpCloud to Exium
- Push User Groups from JumpCloud to Exium
- Push User Deactivation from JumpCloud to Exium
- Reactivate Users from JumpCloud to Exium
- Single sign-on from JumpCloud to sign-on to Exium
This note explains how to configure JumpCloud Exium application settings and Exium Workspace settings so that JumpCloud Users can be synced with Exium Workspace in real time and SSO from JumpCloud can be used to sign-on to Exium Service.
Following steps elaborate JumpCloud API Integration with Exium
¶ 1. Select JumpCloud as Sign-in Option on Exium
¶ 1.1 Copy Workspace Name
To copy workspace name, follow below steps.
- Log into the partner admin console and navigate to the company workspace.
- Click on Settings on left nav bar as shown below (Alternatively you can click on Settings box on Admin Console)
- Copy Workspace Tag as shown below. This is required to configure JumpCloud SSO IdP URL in next step.
¶ 1.2 Change Sign-In Option
As a next step, configure JumpCloud as Sign-in Type. Follow below steps.
- Click on Integrations → SCIM/SAML SSO
- Select JumpCloud as Sign-In Type
- Copy ACS URL (Reply URL) and Entity ID (Identifier) one after other to paste in JumpCloud as explained in next step.
¶ 2. Create Exium app on JumpCloud
In your JumpCloud account console (console.jumpcloud.com), you can create Exium application by creating custom SAML app with required configuration settings.
- Click on SSO Application under USER AUTHENTICATION section.
- Click on + Add New Application under Applications Page as shown below.
- Search for Exium on search bar and select the Exium app shown below.
- Click Next as shown below.
- Optionally modify Display Label and Description. Optionally, you can also Upload Logo
- Expand Advanced Settings
- Enter Workspace Tag (copied on step 1.1) as SSO IdP URL.
- Click on Save Application as shown below.
- Click on Configure Application as shown below
¶ 2.1 Copy Metadata URL
- Under SSO tab Single Sign-On Configuration section, Click on Copy Metadata URL as shown below.
¶ 2.2 Add SSO Service Provider (SP) Details
- Under SSO tab, enter Workspace name (copied on step 1.1) as IdP Entity ID.
- Paste SP Entity ID (Entity ID on Exium Portal).
- Under ACS URLs, paste ACS URL (ACS URL on Exium Portal) at 0th Index
- Paste https://service.exium.net/exium/sign-in/jumpcloud/login as Login URL
- Click on Save as shown below.
¶ 3. Update Metadata URL on Exium Portal
As a next step, Sign-in option on Exium Portal has to be saved by filling-in IDP Metadata URL. This is what is copied in step 2.1
- Paste IDP Metadata URL copied in step 2.1
- Click on Save as shown below.
¶ 4. Update Identity Management (SCIM) key on JumpCloud
Click on Copy next to SCIM 2.0 Bearer Token as shown below.
¶ 4.1 Open JumpCloud Identity Management
- Under SSO Applications, look for Exium app and click anywhere as shown below.
- Click on Identity Management Tab
- Click on Configure as shown below
¶ 4.2 Activate JumpCloud Identity Management
- Paste the SCIM 2.0 Bearer Token (Copied in step 4.1) as Token Key and Click on Activate as shown below.
¶ 5. Assigning User Groups on JumpCloud
As a next step, you can assign user groups to Exium app on JumpCloud. This can be done whenever you wish to add more users or groups to Exium app.
- Click on User Groups tab as shown below.
- Search for a group and Click on Select box on left side of the group
- Click on Save as shown below.
¶ 5. Verify SSO on Exium Service URL
If you are part of admin group, you can access admin console through SSO. you can press your workspace name on service portal by entering the workspace name. Browser opens one more tab for JumpCloud authentication. (Note: Some browsers block popups. You need to allow the popup to allow one more tab to be opened to take JumpCloud authentication).
After successful authentication, it’ll show the message that “User is successfully Verified.” You can close the tab, then you’ll be in admin console in the original tab where you have entered workspace name. If the SSO verified user is not part of admin user, it gives an error that you don’t have access.
If you have any issue during integration, contact us at support@exium.net or raise a ticket on https://exium.net/help-center/
If you would like to see how Exium can help defend your organisation, contact us at hello@exium.net