mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-09-22 13:39:35 +00:00
68 lines
2.9 KiB
Plaintext
68 lines
2.9 KiB
Plaintext
---
|
|
title: "JumpCloud SAML"
|
|
description: "Configure JumpCloud SAML for Infisical SSO"
|
|
---
|
|
|
|
1. In Infisical, head over to your organization Settings > Authentication > SAML SSO Configuration and select **Set up SAML SSO**.
|
|
Next, copy the **ACS URL** and **SP Entity ID** to use when configuring the JumpCloud SAML application.
|
|
|
|
|
|
|
|
2. In the JumpCloud Admin Portal, navigate to User Authentication > SSO and create an application. If this is your first application, select **Get Started**;
|
|
if not, select **+Add New Application**
|
|
|
|
|
|
|
|
3. Next, select **Custom SAML App** to open up the **New SSO** dialog.
|
|
|
|
|
|
|
|
4. In the **General Info** tab, give the application a unique name like Infisical.
|
|
|
|
|
|
|
|
5. In the **SSO** tab, set the **SP Entity ID** and **ACS URL** from step 1; set the **IdP Entity ID** to the same value as the **SP Entity ID**.
|
|
|
|
|
|
|
|
6. On the same tab, check the **Sign Assertion** checkbox and fill the **IDP URL** to something unique.
|
|
Copy the **IDP URL** to use when finishing configuring the JumpCloud SAML in Infisical.
|
|
|
|
|
|
|
|
7. On the same tab, in the **Attributes** section, configure the following map:
|
|
|
|
- `email -> email`
|
|
- `firstName -> firstname`
|
|
- `lastName -> lastname`
|
|
|
|
|
|
|
|
Finally press activate to create the SAML application.
|
|
|
|
8. Next, select the newly created SAML application and select **Download certificate** under the **IDP Certificate Valid** dropdown
|
|
|
|
|
|
|
|
9. Back in Infisical, set the **IDP URL** from step 6 and the **IdP Entity ID** from step 5. Also, paste the certificate from the previous step.
|
|
|
|
|
|
|
|
<Note>
|
|
When pasting the certificate into Infisical, you'll want to retain `-----BEGIN
|
|
CERTIFICATE-----` and `-----END CERTIFICATE-----` at the first and last line
|
|
of the text area respectively.
|
|
</Note>
|
|
|
|
10. Assignments
|
|
|
|
Back in JumpCloud, navigate to the **User Groups** tab and assign users to the newly created application.
|
|
|
|
|
|
|
|
11. Return to Infisical and enable SAML SSO.
|
|
|
|
Enabling SAML SSO enforces all members in your organization to only be able to log into Infisical via JumpCloud.
|
|
|
|
|