Answer
JumpCloud SSO/SAML and Automatic License Provisioning
Prerequisite: Verify Domain in the Foxit Admin Console
- Open Foxit Admin Console
- Navigate to Settings > Directory Setting > Verify Domain / Domain Settings
- You can verify domains in the following two methods:
- DNS Method – Copy a TXT record to your domain name system. (Recommended)
- Type -> TXT
- Host/Name -> @ or leave blank
- TXT Value -> (Copy>Paste from Foxit Admin Console under
- TTL -> 1 Hour
- HTTPS Method – Upload an HTML file to the root folder of your domain’s website.
- After uploading the HTML file or adding the TXT record, click Verify Domain.
- In the pop-up dialog box, select TXT Record or HTTPS correspondingly, enter the domain you want to verify in the Domain field, and click Verify domain.
- Then the domain will be added to the Verified Domains List, and you can view the verification status. The status of a domain may show Unverified. Verifying domains using DNS may take up to 72 hours for your domain to verify and DNS changes to take effect. Then you can click Verify in the Actions column to verify again.
To remove a domain from the list, click Remove in the Actions column. When a verified domain is removed, the users with that domain are no longer managed and won't appear on your managed account page
JumpCloud SSO/SAML Configuration
1.SAML Configuration
1.1 Sign up on JumpCloud
Go to https://www.jumpcloud.com/, Click Try for Free, then follow the steps to register users.
After registration, login to https://console.jumpcloud.com
1.2 Add SSO Application
Click USER AUTHENTICATION → SSO → Add Icon
Click Custom SAML App
Input Display Label
Switch to SSO tab.
Enter the IdP Entity ID your <custom value> , then enter the <custom value> into Identity provider Entity ID of Admin Console.
Enter the SP Entity ID of Admin Console into SP Entity ID of JumpCloud, enter the SP Assertion Consumer Service URL of Admin Console into ACS URL of JumpCloud,
Select the Sign Assertion
Change the IDP URL to your custom value
Click add attribute, then add Email、FirstName、LastName Attribute
Click activate
Click continue
App list
1.3 Complete SAML configuration
Enter the IdP Entity ID of JumpCloud into Identity provider Entity ID of Admin Console.
Enter IDP URL of JumpCloud into Identity provider SSO URL of Admin Console.
Download IDP Certificate → fill in the contents of certificate.pem in Public x509 certificate of Admin Console
Click Save
JumpCloud Automatic License Provisioning
2. Enable Provision in Foxit Admin Console
2.1 Login to Foxit Admin Console. Navigate to Settings > Directory Setting > Directories.
Select the JumpCloud directory and click Enable Provision to support provisioning with JumpCloud.
2.2 Click Provision Settings in the More settings of the JumpCloud directory.
2.3 Copy and save the Tenant URL and the Secret token.
These values will be entered in the Base URL and Token Key fields in the Identity Management tab in the JumpCloud.
3. Create an app on the JumpCloud admin page
3.1 Sign in to the JumpCloud admin page, and go to USER AUTHENTICATION > SSO.
3.2 Create application and sso config
How to integrate Foxit Admin Console with JumpCloud (SAML SSO 2.0)
4. Provisioning
4.1Switch to Identity Management tab.
Enter the Tenant URL of Admin Console into Base URL of JumpCloud, enter the Secret token of Admin Console into Token Key of JumpCloud.
Enter the Test User Email your test email with the domain your config in Admin Console.
4.2 Click Test Connection
4.3 Click Activate
4.4 Click Save
5. Create groups on the JumpCloud admin page
5.1In the JumpCloud Console, go to USER MANAGEMENT > User Groups. Click Add Group Icon.
5.2 Complete the fields in the New User Goup dialog. Click Save.
5.3 Add the people to the group who should have access to the app.
6. Assign groups to App
In the JumpCloud Console, go to USER AUTHENTICATION > SSO. Click your App. Swith to User Groups tab. Select Groups then click save.