> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/system-management/settings/single-sign-on-sso/jumpcloud-sso.md).

# JumpCloud SSO

You can configure JumpCloud as your single sign-on SAML provider for logging into DoControl. You need to configure Amazon Cognito, the DoControl user pool, as your new JumpCloud application.

{% hint style="info" %}
After you configure JumpCloud, you can use your JumpCloud credentials to login via DoControl. Note that DoControl supports only service provider initiated SSO via DoControl's login page.
{% endhint %}

To integrate DoControl with JumpCloud, you need to:

* [Create a JumpCloud connection](#create-jumpcloud-connection)
* [Add a generic SAML connection](#add-generic-saml-connection)

{% hint style="info" %}
For best practices on how to configure JumpCloud as a generic SAML, see [DoControl videos](/docontrol-user-guide/help/videos.md#docontrol-login-with-generic-saml).
{% endhint %}

## Create JumpCloud connection

1. Login to JumpCloud as an admin user.
2. In JumpCloud, navigate to **SSO > Add new application**. 
3. Search for `cognito`and click **Configure**.
4. In the General info tab, enter DoControl as the display label, and replace the logo with the DoControl <img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FoFwYbzd7mndTNEWVYqmt%2FLogoDO.jpg?alt=media&amp;token=1fd05dd2-bb60-4ed7-ad64-93610d4f9f3f" alt="" data-size="line"> icon.<br>

   <figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FSZCYUWMULf2H0TKEnsOi%2FSSO%20JumpCloud%201.png?alt=media&amp;token=932b6b7c-aceb-45bb-9717-2b4c78afbef4" alt=""><figcaption></figcaption></figure>
5. In the SSO tab, enter the SP entity ID:\
   `urn:amazon:cognito:sp:us-east-1_Tx9u9xQ4d`

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FXywW9LoAiae4Ajvo8N1M%2FSSO%20JumpCloud%203.png?alt=media&amp;token=2c89ec44-2b8a-4427-8739-726c0f500b21" alt=""><figcaption></figcaption></figure>

6. Enter the ACS URL:\
   `https://docontrol-main.auth.us-east-1.amazoncognito.com/saml2/idpresponse`
7. Enter the login URL:\
   `app.docontrol.io`
8. For each SAML attribute, provide the relevant URI attribute value:

   * **Email address** - <http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress>
   * **Given name** - <http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname>
   * **Surname** - <http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname>

   Make sure that any SAML attribute configured in the SAML integration is also sent from JumpCloud.
9. In the User groups tab, assign and add the relevant people or groups to connect DoControl with your identity provider. Make sure that all listed people and groups exist in DoControl as team members. Indicate that user names are case-sensitive.&#x20;
10. Click **Activate**, then **Continue.**
11. &#x20;Click on the Cognito app you just created.
12. &#x20;Go to the SSO tab and extract XML content in one of these ways:
    * Click **Export metadata**, OR
    * Click **Copy metadata URL**, and open a new tab in your browser with the metadata URL.

<figure><img src="https://3236294211-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MesrnyDMZGYg1V-tOBo%2Fuploads%2FKVPEDqpId9tlEhYkoIzX%2FSSO%20JumpCloud%205.png?alt=media&amp;token=11a2b529-8431-47ea-b868-4f5dcb681e2d" alt=""><figcaption></figcaption></figure>

13. Copy the entire XML content. Keep this for when you [add a new generic SAML connection](#add-a-new-generic-saml-connection) in DoControl.

## Add generic SAML connection

SAML (Security Assertion Markup Language) 2.0 is an open standard that allows DoControl to connect to your organization's IdP, such as JumpCloud.

SAML makes single sign-on (SSO) possible by authenticating a user once and then communicating that authentication to DoControl.

{% hint style="success" %}
To enable users to login to DoControl with their JumpCloud credentials, follow the instructions to configure a [generic SAML](/docontrol-user-guide/system-management/settings/single-sign-on-sso/generic-saml.md).
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docontrol.io/docontrol-user-guide/system-management/settings/single-sign-on-sso/jumpcloud-sso.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.