SAML Single Sign On ( SSO ) into Drupal using JumpCloud as IDP

Drupal SAML JumpCloud SSO ( Single Sign-on ) setup will allow your user to login to your Drupal site using their JumpCloud Credentials. Drupal SAML module gives the ability to enable SAML Single Sign-on for Drupal. This module is compatible with all SAML Identity Providers ( IDP ). We provide Drupal SAML Single Sign on - Service Provider module which is compatible with Drupal 7, Drupal 8 and Drupal 9. Here we will go through a guide to configure SAML SSO between Drupal and JumpCloud Idp. By the end of this guide, users from your Identity Provider should be able to login into the Drupal site.

If you have any queries or if you need any sort of assistance in configuring the module, you can contact us at drupalsupport@xecurify.com. If you want, we can also schedule an online meeting to help you configure the Drupal SAML Single Sign on - Service Provider SSO Login module.

Steps to configure Drupal SAML Single Sign-On ( SSO ) Login into Jumpcloud

2. Configuring Drupal as Service Provider

• In the Service Provoder Setup tab, and enter the name of Service Provider as Jumpcloud.

• Navigate to the Service Provider Setup tab of the miniOrange SAML Identity Provider module on your Drupal site. There are two way to configure your Identity Provider.

• Click on UPLOAD SP METADATA link.
• You can either Upload Metadata File and click on Upload button or use a Upload Metadata URL and click on Fetch Metadata.

• Enter the Below information from Jumpcloud.
• Provide the required settings (i.e. Service Provider Name, SP Entity ID or Issuer, ACS (Assertion Consumer Service) URL, X.509 Certificate (Optional)) as provided by your Service Provider.

Service Provider Name	Name of your Service Provider.
SP Entity ID or Issuer	Copy the SP Entity ID/Issuer from the Service Provider.
ACS URL	Copy the SP ACS URL from the Service Provider.
NameID Format	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Assertion Signed	Checked

• Click on the Save Configuration button to save your configuration. Then click on Test Configuration button to test your configuration.

3. Configuring JumpCloud as Identity Provider

Follow the steps below to configure JumpCloud as IdP

 Configure JumpCloud as IdP

• In the miniOrange SAML 2.0 SSO module, navigate to Service Provider Metadata tab. Here, you can find the SP metadata such as SP Entity ID and ACS (AssertionConsumerService) URL which are also required to configure the Identity Provider.

• Login to your JumpCloud Administrator Console at https://console.jumpcloud.com


• Click on administrator Login.
  
  
  
• Login with your JumpCloud administrator Login credentials.
  
  
• Go to User Authentication > SSO.

• Select the + in the upper left.

• Enter the Display label (App name) , Description and click on the Activate button.

• Click on Upload Metadata button for uploading the metadata from drupal and click on the Save button.

• After successfull configuration click on the Export Metadata button.


Display Label Name	Enter a label for Service Provider.
Description	Enter description for your application.



• In Single Sign-On Configuration, enter the following:

Idp Entity ID	Enter SP Entity ID / Issuer from the Service Provider Metadata tab of the module.
SP Entity ID	Enter SP Entity ID / Issuer from the Service Provider Metadata tab of the module.
ACS URL	Enter ACS URL from the Service Provider Metadata tab of the module.
IDP URL	Create custom url where users will be redirected for authentication.

24*7 Active Support:

If you face any issues or if you have any questions, please feel free to reach out to us at drupalsupport@xecurify.com. In case you want some additional features to be included in the module, please get in touch with us, and we can get that custom-made for you. Also, If you want, we can also schedule an online meeting to help you configure the Drupal SAML SP modules.

Additional Resources

• What is Single Sign-On (SSO)?
• What is SAML?
• Frequently Asked Questions (FAQs)

Our Other Module

SAML SP  |  SAML IDP  |   2FA/Passwordless Login  |   OAuth/OIDC Client  |  LDAP/AD Login  |  OAuth Server  |  Decoupled/Headless Authentication  |  OTP Verification  |  Website Security  |  Rest API Authentication  |  SCIM User Provisioning