Configuring JumpCloud as an identity provider
You can use JumpCloud as an identity provider to access SC//Nexus™. To do this, you create a SAML 2.0 Connector on the JumpCloud platform.
SC//Nexus service provider details
SC//Nexus publishes the following service provider details for your identity provider. The steps on this page show which of them JumpCloud uses and where to enter them.
| Detail | Value |
|---|---|
| SC//Nexus™ portal service provider metadata (XML) | https://nexus.scalecomputing.com/api/v1/saml/metadata |
| Assertion Consumer Service (ACS) URL | https://nexus.scalecomputing.com/sso/api/oauth/saml |
| Entity ID / Audience URI | https://saml.stargate.local |
| Signing Certificate | https://nexus.scalecomputing.com/sso/.well-known/saml.cer |
Create the JumpCloud SAML 2.0 Connector
The JumpCloud documentation provides the steps for creating a custom SAML 2.0 Connector on their platform. For more information, see SSO using Custom SAML Application Connectors in the JumpCloud documentation.
When configuring your JumpCloud application, use the Upload Metadata option in their procedure to upload the SC//Nexus service provider metadata. Retrieve the metadata XML from the following URL and save it as a file.
https://nexus.scalecomputing.com/api/v1/saml/metadata
If you configure the connector manually instead of uploading the metadata, use the following values.
| Setting | Value |
|---|---|
| SP Entity ID | https://saml.stargate.local |
| ACS URL | https://nexus.scalecomputing.com/sso/api/oauth/saml |
| SAMLSubject NameID | |
| SAMLSubject NameID Format | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress |
| Signature Algorithm | RSA-SHA256 |
| Sign assertion | Enabled |
| Sign response | Not required |
| IdP-Initiated URL | leave blank |
Retrieve the identity provider metadata
Once your JumpCloud SAML connector exists, retrieve the JumpCloud identity provider metadata and provide it to your Scale Computing account manager or Support to complete the setup.
- In the JumpCloud Admin console, access the settings for the SC//Nexus application you created.
- On the SSO tab, locate the JumpCloud Metadata section.
- Choose Export Metadata.
- Provide that metadata to your Scale Computing account manager or Support, who adds it to your SC//Nexus organization.
IMPORTANT: Ensure that the user's email in JumpCloud matches the user's SC//Nexus account email address, in all lowercase.