Configure JumpCloud SSO

• This tutorial is based on this article from JumpCloud.
• Access the JumpCloud Administrator Console at https://console.jumpcloud.com.
• Go to USER AUTHENTICATION > SSO.
• Click ( + Add New Application ) to configure a new application.
• Search for Auth0, then click configure.
• Enter a Display Label in the General Info tab. Komodor is recommended.

Configure SAML

• Go to the SSO tab
  • choose a TEAMNAME, preferably your company name, and replace it in the following steps
  • Change the IDP URL suffix to komodor
  • Change the IdP Entity ID to https://komodorio.com
  • Change the SP Entity ID to urn:auth0:komodorio:TEAMNAME
  • Change the ACS URL to https://auth.komodor.com/login/callback?connection=TEAMNAME
• Click activate.
• Click continue on the confirmation window.
• Click Download Certificate in the top right of the window.
• Alternatively, you can copy the Metadata URL and send this info.

Contact Komodor

• Update your komodor contact with the following information:
  • The TEAMNAME
  • Send the certificate file / metadata URL

Next steps

• Now you'll need to authorize user access to Komodor.
  • see here for more info.

• Wait for approval from your komodor contact that the connection is ready to test.

• The tutorial is now complete. You can now log in to Komodor using your JumpCloud credentials.

Configure SAML Attributes for JumpCloud SSO

• This tutorial is based on this article from JumpCloud.
• After configuring your JumpCloud SAML connection to Komodor, you can assign RBAC roles to users based on your account's Komodor roles.

Add Komodor Roles to a user from the JumpCloud Admin Portal:

• Login to the Admin Portal: https://console.jumpcloud.com/.
• Go to User Management > Users.
• Click the green + symbol at the top-left to create a new user, or select an existing user for the User Details Panel. click details on the right-hand column of an existing user.
• Go to Custom Attributes.
• Click Add New Custom Attribute.
• For Attribute Name, enter komodorRoles
• For Attribute Value, enter a comma-separated list of roleIds.
• For example: role-id-1,role-id-2
• No spaces and quotes are allowed.
• You can find the roleIds in the Komodor UI by going to Settings > Roles.
• Click Save.

Groups

• You can also assign roles to groups.
• Go to User Management > User Groups.
• Choose a group -> Details -> Custom Attributes -> Add New Custom Attribute.
• For Attribute Name, enter komodorRoles
• For Attribute Value, do the same as for users
• Click Save.
• Now, all users in this group will have the roles you specified.
• If a user in this group has a different set of roles, the user's roles will override the group's roles.