Configuring JumpCloud as an identity provider

Configuring JumpCloud as an identity provider

You can use JumpCloud as an identity provider to access SC//Nexus™. To do this, you create a SAML 2.0 Connector on the JumpCloud platform.

SC//Nexus service provider details

SC//Nexus publishes the following service provider details for your identity provider. The steps on this page show which of them JumpCloud uses and where to enter them.

Detail Value
SC//Nexus™ portal service provider metadata (XML) https://nexus.scalecomputing.com/api/v1/saml/metadata
Assertion Consumer Service (ACS) URL https://nexus.scalecomputing.com/sso/api/oauth/saml
Entity ID / Audience URI https://saml.stargate.local
Signing Certificate https://nexus.scalecomputing.com/sso/.well-known/saml.cer

Create the JumpCloud SAML 2.0 Connector

The JumpCloud documentation provides the steps for creating a custom SAML 2.0 Connector on their platform. For more information, see SSO using Custom SAML Application Connectors in the JumpCloud documentation.

When configuring your JumpCloud application, use the Upload Metadata option in their procedure to upload the SC//Nexus service provider metadata. Retrieve the metadata XML from the following URL and save it as a file.

https://nexus.scalecomputing.com/api/v1/saml/metadata

If you configure the connector manually instead of uploading the metadata, use the following values.

Setting Value
SP Entity ID https://saml.stargate.local
ACS URL https://nexus.scalecomputing.com/sso/api/oauth/saml
SAMLSubject NameID Email
SAMLSubject NameID Format urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Signature Algorithm RSA-SHA256
Sign assertion Enabled
Sign response Not required
IdP-Initiated URL leave blank

Retrieve the identity provider metadata

Once your JumpCloud SAML connector exists, retrieve the JumpCloud identity provider metadata and provide it to your Scale Computing account manager or Support to complete the setup.

  1. In the JumpCloud Admin console, access the settings for the SC//Nexus application you created.
  2. On the SSO tab, locate the JumpCloud Metadata section.
  3. Choose Export Metadata.
  4. Provide that metadata to your Scale Computing account manager or Support, who adds it to your SC//Nexus organization.

IMPORTANT: Ensure that the user's email in JumpCloud matches the user's SC//Nexus account email address, in all lowercase.