This section documents the standard configuration for JumpCloud as an identity provider to support log in to the DataGrail app. _With this configuration, user roles must be managed within DataGrail._

**Persons Needed to Complete Configuration:** IT Person from your organization

1. Log in to JumpCloud as an **Administrator**.
2. Navigate to the configured applications by selecting **User Authentication** and **SSO**.
3. Add a new application and select **Custom SAML App**.
4. Complete the **Single-Sign On** Configuration.

### SAML Configuration

**IdP Entity ID:** `jumpcloud-datagrail`  
**SP Entity ID:** `https://{customer_subdomain}.datagrail.io/saml/metadata`  
**ACS URL:** `https://{customer_subdomain}.datagrail.io/saml/auth`  
**SAMLSubject Name ID:** `email`  
**SAMLSubject NameID Format:** `urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress`  
**Signature Algorithm:** `RSA-SHA256`  
**Login URL:** `https://{customer_subdomain}.datagrail.io/saml/login`  
**IdP URL:** `https://sso.jumpcloud.com/saml2/datagrail`

**Attributes (User Attributes):**

| Service Provider Attribute Name | JumpCloud Attribute Name |
| --- | --- |
| `email` | `email` |
| `first_name` | `firstname` |
| `last_name` | `lastname` |

_If you are unclear on what your subdomain would be, please confirm with your Account Manager or reach out to [support@datagrail.io](mailto:support@datagrail.io)._

5. Open the **User Groups** tab and select the group of users you want to provide access to DataGrail.
6. **Save** and export the **XML Formatted Metadata**.
7. Return to the DataGrail SSO setup page, select the **Upload XML** tab, and upload the metadata file. Select **Configure** to validate and complete the setup.

### Inviting New Users

For more information on adding users and managing roles, see [Inviting New Users](https://docs.datagrail.io/docs/overview/user-management/inviting-new-users).

### Need help?

If you have any questions, please reach out to your dedicated Account Manager or contact us at [support@datagrail.io](mailto:support@datagrail.io).

_Disclaimer: The information contained in this message does not constitute legal advice. We would advise seeking professional counsel before acting on or interpreting any material._