This article explains how to configure the SAML SSO integration of Jumpcloud with Quickpass. 

Prerequisites

• Administrator role for Jumpcloud
• Jumpcloud configured with the user accounts that will be used for accessing Quickpass..
• Primary or Super Role in Quickpass
• All of your Technicians configured in Login Management in Quickpass will need an account in Jumpcloud with exactly the same email address.
  Manual - https://support.getquickpass.com/hc/en-us/articles/360040722434-How-to-Setup-Quickpass-Dashboard-Logins
  Bulk Import - https://support.getquickpass.com/hc/en-us/articles/4411037813783-How-to-Bulk-Import-Quickpass-Dashboard-Logins 
  • Note the Primary and Super Roles will still be able to login with their Quickpass Account username and password to allow access in the case of challenges with the SSO.
• A User Group that you wish to use for sign in to the Quickpass Dashboard should be created and the users you wish to have access should be made members of this group.
  
• Initial configuration steps as per https://support.getquickpass.com/hc/en-us/articles/4419178721559-Setting-up-Dashboard-Logins-for-SSO-SAML-
• Before turning this feature on, log in to your Quickpass account twice - once in a regular browser and once in an incognito/private window or another browser. This is to ensure that you are still logged in to your account if you get locked out in the other window.

Instructions

1. Log in to the Jumpcloud Portal. In the left-hand menu, click SSO under the User Authentication section.

   

2. Click Add New Application at the top of the screen.

   
   
   

3. Select the "Custom SAML App" at the bottom of the screen.  (We are working with Jumpcloud to allow you to select a preconfigured SSO configuration for Quickpass.  The KB will be updated when this is available)

   
   
   

4. On the General Info tab fill in the Display Label, Description, and Display Options for the Application you would like to configure.  You can choose to display this application in the User Portal if you wish, but at this time Jumpcloud and Quickpass are not able to log the user directly into the dashboard.
   
   
   
5. Click on the SSO Tab.
6. Fill in the values as follows:
   
   1. IdP Entity ID: This can be any value you wish.  Jumpcloud recommends "Jumpcloud" but this can be any value you determine is appropriate.  This will be used on the Quickpass Dashboard Authentication Options -> Issuer URL value.
      
      NOTE: This value is Case Sensitive.  However you have this value set, it must be set identically on the Quickpass Login Management page.
   2. SP Entity ID: This is the Entity ID value prepopulated for you on the Authentication Options screen in Quickpass.  Copy the value from there and paste in this field:
      
   3. ACS URLs:
      

      NA or Oceania	https://admin.getquickpass.com/api/auth/sso/login/callback
      EU	https://eu-admin.getquickpass.com/api/auth/sso/login/callback

   4. SAMLSubject NameID: This value should be "email" (no quotes)
      
   5. SAMLSubject NameID Format:  This value should be the default but if your screen doesn't match this select it from the DropDown:
      
   6. Signature Algorithm:  This value should be set by default to RSA-SHA256
   7. Default RelayState: This is the Entity ID value prepopulated for you on the Authentication Options screen in Quickpass.  Copy the value from there and paste in this field:
      
   8. Login URL
      

      NA or Oceania	https://admin.getquickpass.com
      EU	https://eu-admin.getquickpass.com

   9. IDP URL:  This value can be set by you.  You can use any value you wish here.  The default suggestion from Jumpcloud is to use:
      
      However, whatever value you place in this screen is what is going to be used on the Quickpass Dashboard as the SAML Login and Logout Endpoint URL.
      
      NOTE: This value is Case Sensitive.  However you have this value set, it must be set identically on the Quickpass Login Management page.
      
      
7. Click on Activate.
   
8. Click on the Application you just created on the Jumpcloud SSO configuration page and then select the User Groups. section.
   
   1. Select the checkbox beside the Group you created for access to the Quickpass Dashboard.
      
   2. Click Save
      
9. Certificate Values
   1. You will need the certificate that was generated by Jumpcloud or your own IDP Certificate if you created your own by following the KB from Jumpcloud on this process.
   2. Click the Application you just created.
   3. Click the IDP Certificate "Valid" (hopefully it shows valid if you set it up correctly or used the default Certificate that Jumpcloud created for you) Dropdown and select Download Certificate
      
   4. Save the file somewhere secure.
   5. Open this file in a Text Editor.
      1. Copy the contents
      2. Paste the Value into the SAML SSO - Certificate on the Quickpass Dashboard (ensure that there are no leading or trailing spaces before or after the ---- characters)
   6. Launch the Website: https://www.samltool.com/fingerprint.php
      1. Copy and paste the certificate value from the Text Editor for the Certificate File you downloaded.
      2. Change the Algorithm Value to sha256.
      3. Click Calculate Fingerprint.
      4. You will need the "Formatted FingerPrint" value
         1. Copy the SHA-256 Fingerprint from the page 
            
         2. Paste it into the Quickpass Fingerprint box
            
10. Jumpcloud values to be placed in the Quickpass SAML SSO Setup Screen 
    1. Copy and paste the SSO URLS from Jumpcloud to and from the Quickpass Dashboard to match this image
       

Testing

1. In another browser or an Incognito/Private Browser Log open the Quickpass Dashboard
   

   NA or Oceania	https://admin.getquickpass.com
   EU	https://eu-admin.getquickpass.com

2. Click Log In with SSO
   
3. Enter the Email Address that is configured for the Login Role Account you are testing - Click Log In
   
4. You should be prompted to sign into the Jumpcloud Single Sign-On just as you normally are.
   
5. Sign in with the credentials from the SSO Source you normally use.
6. You should be prompted with whichever Jumpcloud Sign In options you have configured as mandated for login.  This example uses MFA.
   
7. Upon approval, the Technician should be logged into the Quickpass Dashboard with the proper account and permissions as assigned in the Quickpass Login Management.