<span id="top"></span>

Configuring JumpCloud SSO

This guide outlines the steps to configure Single Sign-On (SSO) with JumpCloud for Qualified. Follow these instructions to streamline authentication for your users and enhance security.

• Prerequisites
• Steps to Configure JumpCloud SSO
• Binding Email Process for Existing Users
• Adding New Users
• Disconnecting SSO

<span id="prerequisites"></span>

Prerequisites

1. A JumpCloud Admin account. 
2. Access to Qualified’s Enterprise Single Sign-on and the Admin user role.
3. Your organization’s Company ID from Qualified.
4. A basic understanding of SAML 2.0 configuration.

Back to Top

<span id="steps-to-configure"></span>

Steps to Configure JumpCloud SSO

Step 1: Set up in Qualified

1. Log in to your Qualified Admin account.
2. Navigate to Settings → Organization → Single Sign-On.
3. Leave the Identity Provider dropdown set to None.
4. Copy your Company ID.

Step 2: Configure in JumpCloud

1. Visit the URL https://app.qualified.com/auth/saml/COMPANY_ID/metadata to download the Metadata File.
2. Log in to the JumpCloud Admin Console.
3. Go to SSO Applications, and click Add New Application. 
4. Click Upload Metadata to upload the file you downloaded in 1.
5. Set the IdP Entity ID to the Company ID.
6. Set the SP Entity ID to https://app.qualified.com
7. Set the ACS URL at Index 0 to https://app.qualified.com/auth/saml/COMPANY_ID
8. Create three custom attributes with the following details:
   1. first_name, which points to firstname
   2. last_name, which points to lastname
   3. saml_id, which points to username
9. Press Copy Metadata URL at the top of the screen.
10. Press Save.

Step 3: Finalize SSO in Qualified

1. Return to Settings → Organization → Single Sign-On in Qualified.
2. Paste the Identity Provider Metadata URL from JumpCloud into the required field.
3. Click Save and then Verify Configuration to test the connection.
4. Before enabling single sign-on, make sure to assign all existing Qualified users access to the Qualified application in JumpCloud (including yourself) as they will no longer be able to access Qualified with their password once SSO is enabled.
   • Existing users will receive an email to bind their accounts: Binding Email Process for Existing Users
5. When you’re ready, click Enable single sign-on for this org.

Back to Top

‍

<span id="binding-email-process"></span>

Binding Email Process for Existing Users

After enabling SSO, all existing Qualified users receive an email from app@qualified.com with a unique binding link.

Users must click the link within 72 hours to bind their Qualified account to their JumpCloud Account. If the binding link expires, an admin can resend it from Qualified by going to Settings → Organization → Users.

Back to Top

<span id="adding-new-users"></span>

Adding New Users

Simply follow the steps below to add new users to Qualified: 

1. Assign Users in JumpCloud: a JumpCloud admin will need to assign the user to the Qualified application in JumpCloud.
2. ‍Invite Users in Qualified: Invite users from Settings → Organization → Users in Qualified: Provisioning Users in Qualified‍
3. User Accepts Invite: Invited users will receive an email with a button to link their account and access Qualified. 

Back to Top

<span id="disconnecting-sso"></span>

Disconnecting SSO

If you'd like to disconnect your company’s SSO, you can do so at any time.

1. Go to Settings → Organization → Single Sign-On 
2. Click Disable SSO for this team. 
3. Users will receive an email to create a new password and log in using their email addresses.

Back to Top