Single sign-on · Setup guides

Set up a custom SAML application in JumpCloud and connect it to OrbitID. You need a JumpCloud administrator account.

Step 1: Create application

From your JumpCloud Admin console, click SSO from the left navigation menu.

If your application is already created, choose it from the list and move to the next step.

If you haven't created a SAML application, click the plus icon and then Custom SAML App to create a new application.

Give your application a Display Label.

Step 2: Configure application

Next click on the SSO tab and enter the following values:

IdP Entity ID

https://saml.orbitid.com/<id>

The IdP Entity ID for this organization, shown when you connect JumpCloud for it in the OrbitID dashboard.

SP Entity ID

https://saml.orbitid.com

The SP Entity ID shown in your OrbitID Configuration page. Sandbox uses https://saml.orbitid.com/sandbox.

ACS URL

https://app.orbitid.com/api/oauth/saml

The ACS URL shown in your OrbitID Configuration page. Sandbox uses https://app.orbitid.com/api/oauth/sandbox/saml.

Step 3: Attribute mapping

Under the Attributes section, you have to configure the following attributes:

Make sure you have checked the Declare Redirect Endpoint checkbox.

Finally, click Activate to save the application configuration.

Step 4: Download the IdP metadata

Now go back to the SAML app you just created, click the tab SSO, and click the button Export Metadata to download the metadata XML file.

Finish in OrbitID

Finish in OrbitID: paste the IdP metadata URL or XML into the connection form (or the Admin Portal link). In the dashboard, open the environment, go to Connections, click New connection, choose SAML and paste the metadata URL or the XML you downloaded. If your customer's admin is following an Admin Portal link, they paste it into the final step of the portal instead.

You can also create the connection with the API: POST /api/v1/sso as described in the quickstart.