Skip to Content

Integrate Jumpcloud SSO with Ezeelogin

599  Krishnaja March 30, 2023  Features & Functionalities

Note: SAML is an authentication mechanism for web applications. It's based on web protocols and it cannot be used for user authentication over SSH.

1. Login to Jumpcloud and Add the Application

 

2. Search for SAML 2.0 

 

3. Change the Display Label and save 

 

4. Select the configure tab  and fill in the Application details and activate

     IdP Entity ID - Entity ID ( you can find it from ezeelogin GU > Settings > SAML)     
     SP  Entity ID -Entity ID ( you can find it from ezeelogin GU > Settings > SAML)
     ACS (Consumer) URL   

5. Select the SSO tab from the right panel & Copy the Metadata URL and paste it  to Metadata URL  on Ezeelogin GUI > Settings > SAML Metadata URL 

6. Click on the fetch button, it will auto-fill the SAML setting and SAVE it.

7.  Select the user group tab from the left panel, add the user group name, and save it.

8.Add the user by selecting the users tab.

9.  Select the SSO applications from left panel and assign the user group to that application

10.  Change Web panel Authentication to SAML from Ezeelogin GUI > Settings > General >Authentication

 
11. Enable Auto Create User from Ezeelogin GUI -> Settings -> General -> Security -> Enable Auto Create User

 

12. Login to Ezeelogin GUI with SAML authentication.
13. After logging into GUI, you need to reset the password and security code of the SAML user under Account -> Password in order to SSH to Ezsh shell.
 
14. After resetting the password and security code you can ssh to the Ezsh shell (using Terminal or putty)with the SAML username as shown below in the screenshot

 
15. If you are SSH ing with 2FA  enabled using Putty or Terminal it would prompt you to enter the 2FA codes, The 2FA step can be disabled for SAML Authentication under Settings > Two Factor Authentication> Skip Two Factor Authentication for SAML. The user will be able to ssh without being prompted for the 2FA codes only if the user is logged into the web panel, otherwise, if the user is not logged into the web panel it would prompt for the 2FA codes.
 
We would recommend you use the webssh shell when you are using SAML authentication. Using webssh shell is a lot more convenient as you would not have to worry about the SSH password or the security code for the users.

Set up webssh console in Ezeelogin and ssh via browser

You need to add a different email address for each user. By default, ezeelogin uses an email address for creating users. 

If you want to add an existing user in ezeelogin to SSO, Add the user with the exact username, and email address as follows. (Ezeelogin will verify the email address of the users by default). Make sure to add the email address for the Ezeelogin Administrator user
Rating: 5 (1 Votes)