Answer
JumpCloud SSO/SAML and Manual User Sync
Prerequisite: Verify Domain in the Foxit Admin Console
- Open Foxit Admin Console
- Navigate to Settings > Directory Setting > Verify Domain / Domain Settings
- You can verify domains in the following two methods:
- DNS Method – Copy a TXT record to your domain name system. (Recommended)
- Type -> TXT
- Host/Name -> @ or leave blank
- TXT Value -> (Copy>Paste from Foxit Admin Console under
- TTL -> 1 Hour
- HTTPS Method – Upload an HTML file to the root folder of your domain’s website.
- After uploading the HTML file or adding the TXT record, click Verify Domain.
- In the pop-up dialog box, select TXT Record or HTTPS correspondingly, enter the domain you want to verify in the Domain field, and click Verify domain.
- Then the domain will be added to the Verified Domains List, and you can view the verification status. The status of a domain may show Unverified. Verifying domains using DNS may take up to 72 hours for your domain to verify and DNS changes to take effect. Then you can click Verify in the Actions column to verify again.
To remove a domain from the list, click Remove in the Actions column. When a verified domain is removed, the users with that domain are no longer managed and won't appear on your managed account page
JumpCloud SSO/SAML Configuration
1.SAML Configuration
1.1 Sign up on JumpCloud
Go to https://www.jumpcloud.com/, Click Try for Free, then follow the steps to register users.
After registration, login to https://console.jumpcloud.com
1.2 Add SSO Application
Click USER AUTHENTICATION → SSO → Add Icon
Click Custom SAML App
Input Display Label
Switch to SSO tab.
Enter the IdP Entity ID your <custom value> , then enter the <custom value> into Identity provider Entity ID of Admin Console.
Enter the SP Entity ID of Admin Console into SP Entity ID of JumpCloud, enter the SP Assertion Consumer Service URL of Admin Console into ACS URL of JumpCloud,
Select the Sign Assertion
Change the IDP URL to your custom value
Click add attribute, then add Email、FirstName、LastName Attribute
Click activate
Click continue
App list
1.3 Complete SAML configuration
Enter the IdP Entity ID of JumpCloud into Identity provider Entity ID of Admin Console.
Enter IDP URL of JumpCloud into Identity provider SSO URL of Admin Console.
Download IDP Certificate → fill in the contents of certificate.pem in Public x509 certificate of Admin Console
Click Save
JumpCloud (SAML SSO 2.0) user sync configuration
Once you have synced JumpCloud with the Foxit Admin Console, follow the following steps to sync your users.
Note: This article contains information and instructions related to a third-party application (JumpCloud).
These instructions may vary on your environment and need to be confirmed with your JumpCloud vendor, if necessary.
1. Add Directory
1.1 AdminConsole → Settings → Directory Settings
1.2 Input directoty name
1.3 Fill in SSO configuration
Reference Documents：JumpCloud SSO/SAML Configuration
2. Configure domain
2.1 Click Add domain
2.2 Select domain, then click Add
3. Get API Key
3.1 Sign in to the JumpCloud admin page
3.2 Click on the user icon in the upper right corner, the click My API Key
3.3 Copy the API Key
4. Configuration Synchronization
4.1 Click Add Sync
4.2 Enter the API Key copied in 3.3
5. Start sync
5.1 Click Synchronize, then select SynchronizeOptions, then click OK.
6. Sync Results