Configuring JumpCloud SSO with Keka

Introduction

JumpCloud Single Sign-On (SSO) integration with Keka HR provides employees with a secure, seamless way to log in using their JumpCloud credentials. This step-by-step guide will help you set up the integration, configure your JumpCloud app, and enable SSO in Keka.

Step 1: Log in to the JumpCloud Admin Portal

1. Open  JumpCloud Admin Portal.
2. Enter your admin credentials to sign in.

Step 2: Configure the OIDC Connector for SSO

1. In JumpCloud, go to User Authentication > SSO.

2. Click + Add New Application.

3. Select Custom OIDC App.

Step 3: General Info Tab

1. In the Display Label field, enter Keka.
   

Step 4: SSO Tab

1. Open the SSO tab to access the OpenID Connect Configuration window.

Step 5: Endpoint Configuration

1. Grant Types are pre-checked and cannot be changed.
2. Enter the Redirect URL provided by Keka (see Step 12 for where to find it).
3. For Client Authentication Type, choose Client Secret POST.

Step 6: Login URL

1. Enter the following Login URL - https://app.keka.com

Step 7: Standard Scopes

1. Under Standard Scopes select "Email"

Step 8: User Consent

1. By default, Automatically consent is enabled.

Step 9: User Groups tab

1. Add employees or groups who will access Keka via JumpCloud SSO.

Step 10: Activation

1. Click Activate to enable the application.

Step 11: Client Secret (For non-public clients)

1. If the app is not public, JumpCloud generates a Client ID and Client Secret.
2. Copy these and store them securely in a password manager.

3. Important: They disappear once you close the window.

4. Click Got It to finish.

    

Step 12: Login to Keka as a Privileged User

1. In Keka, go to Settings > Integrations & Automation > Authentication.

2. Locate the JumpCloud card and click Configure.

Step 13: Configuration in Keka

1. In the configuration form, copy the Redirect URL (needed in JumpCloud).
2. Enter the following details:
3. Client ID (from JumpCloud)
4. Client Secret (from JumpCloud)
5. Authorization URL: https://oauth.id.jumpcloud.com
6. Click Save.

Step 14: Enable JumpCloud SSO

JumpCloud SSO is now enabled in Keka. Employees can use their JumpCloud credentials to authenticate and log in to the platform securely.