How to create a JumpCloud application for Swimm
To authorize JumpCloud SSO for your organization, we will need you to create an SSO application on your JumpCloud instance. Follow the steps:
Create JumpCloud Appβ
- Add New Application
- Custom Integration
- Manage Features
- Configure Application
- Add Permissions
- Info for Swimm
Navigate to SSO Applications within the JumpCloud menu and click Add New Application.
![JumpCloud Step 1 - Add new application](/img/sso/jumpcloud/jumpcloud1.png)
Create a Custom Integration. If you canβt see the button, search for Swimm.
![JumpCloud Step 2 - Create a custom integration](/img/sso/jumpcloud/jumpcloud2.png)
Click Next.
![JumpCloud Step 2 - Create a custom integration](/img/sso/jumpcloud/jumpcloud3.png)
Select Manage Single Sign-On and then select Configure SSO with OIDC. Click Next.
![JumpCloud Step 3 - Manage features and specs](/img/sso/jumpcloud/jumpcloud4.png)
Select App specifications -> Display Label
and insert Swimm.
Download Swimm's Logo and select Logo to assign it to the User Portal Image. Click Next.
![JumpCloud Step 3 - Manage features and specs](/img/sso/jumpcloud/jumpcloud5.png)
Click Configure Application.
![JumpCloud Step 4 - Configure Application](/img/sso/jumpcloud/jumpcloud6.png)
You will be redirected to the application page, insert the following fields:
Redirect URIs | https://app.swimm.io/setOIDCToken |
Login URL | https://app.swimm.io/sso |
Client Authentication Type | Public (None PKCE) |
Attribute Mapping Scope | Email and Profile |
![JumpCloud Step 4 - Configure Application fields](/img/sso/jumpcloud/jumpcloud6b.png)
Add users (under User Groups) to grant permissions to use the Swimm application.
Click Activate.
![JumpCloud Step 5 - Add permissions to user groups and activate](/img/sso/jumpcloud/jumpcloud7.png)
Swimm will need the Client ID. Application ID, API Key and the Email domain for users in JumpCloud.
- Copy the Client ID.
- Click on the application to see the Application ID in the application's URL
- Click on your
Settings icon -> My API Key
to generate a new JumpCloud API key. - Provide the email domain JumpCloud users.
![JumpCloud Step 6 - Copy the Client ID](/img/sso/jumpcloud/jumpcloud8.png)
![JumpCloud Step 7a - Application ID found in URL](/img/sso/jumpcloud/jumpcloud9.png)
![JumpCloud Step 7b - Generate API Key](/img/sso/jumpcloud/jumpcloud10.png)
Final Step: Send information to Swimm:β
1. Client IDβ
2. SSO App IDβ
3. JumpCloud API keyβ
4. Email domainβ
Troubleshootingβ
Trouble generating an API key?β
If you do not have permissions to generate an API key, go to Settings -> Administrators -> Click on user -> Check β
"Enable API access" -> Save.
![JumpCloud Step 7b - Generate API Key](/img/sso/jumpcloud/jumpcloud11-bg.png)