Set Up JumpCloud SSO

You can connect Paligo to JumpCloud (https://www.jumpcloud.com) for single sign on (SSO). This is only available on the Enterprise plan.

To use JumpCloud with Paligo, you need to set up JumpCloud to provide metadata to Paligo. The metadata includes the name of the user, the user's email address, and the user group that the user belongs to. The metadata describing the user group is not part of standard metadata. You must add this metadata to the SAML response.

Note

For this section, we assume that you have already created your user accounts in JumpCloud.

To be able to Connect Paligo to your SSO Service you need to set up JumpCloud to integrate with Paligo.

Create a New Application Connector for Paligo in JumpCloud

The first stage of setting up JumpCloud to communicate with Paligo is to create a new application connector.

In JumpCloud:

Go to the JumpCloud console and select SSO and then add an application.
Select Custom SAML App.

In the Settings panel, apply these values (replace the your in your.paligoapp.com with the address of your Paligo instance, for example, acme.paligoapp.com).

Name	Value
Display Label	`Paligo (example)`
IDP Entity ID	paligo/jumpcloud/sso
SP Entity ID	`https://your.paligoapp.com/saml/metadata`
ACS URL	`https://your.paligoapp.com/saml/acs`
Samlsubject NameID	`email`
Samlsubject NameID Format	`urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress`
Signature algorithm	RSA-SHA256
Attributes Create attributes for:
`user.firstname`	`firstname`
`user.lastname`	`lastname`
`user.email`	`email`
Groups Attributes
Include Group Attribute	Checked. This option must be checked/enabled.
Groups Attribute Name	`paligo.usergroup`

Select Save.

Next, you need to Create User Groups in JumpCloud .

Create User Groups in JumpCloud

You should create one user group for each Paligo user group (administrators, authors, contributors, reviewers, publishers, it admins or translation managers) in JumpCloud.

Select Groups.

Create a user group for each Paligo user group.

User group syntax	Description	API access	License type
paligo.admin	Use this value if the user should belong to the group of Paligo administrators. Administrators are top-level users with access to all Paligo features, including those for adding and changing user accounts, managing languages and integrations on the Settings page. Full authoring experience.	Full access	Author license
paligo.user	Use this value if the user should belong to the group of Paligo authors (standard users). Authors (Standard users) are Paligo writers. Full authoring experience. Can use the main Paligo Editor and its advanced features that are needed for creating, publishing and managing content, including content reuse, filtering and variables.Create Assignments, Create Snapshot in Resource View and change to any workflow status in the Resource View. Can use both Review View and Edit View to change content, add content and Create Snapshots in Edit View in Contributor Editor. Can access the Translation View and translation features. These include translation assignments, translation import and export. Also the ability to change workflow status to In translation and In translation review in the Resource View.	Full access	Author license
paligo.contributor	Use this value if the user should belong to the group of Paligo contributors. Contributors are users who, besides reviewing content, may also need to add or edit content, such as engineers or subject matter experts (SME). They can use both the Edit View and Review View. Both Reviewers and Contributors can be sent Review assignments, the difference is that Contributors can switch to Edit View. That enables them to edit and add information and also to Create Snapshots in Edit View.	No access	Contributor license
paligo.reviewer	Use this value if the user should belong to the group of Paligo reviewers. Reviewers are users who need to read content and leave feedback comments on it, but do not change the content in anyway. They have access to Review View.	No access	Reviewer license
paligo.itadmin	Use this value if the user should belong to the group of Paligo IT admins. IT administrators have access to the Settings page. They can create users, set up integrations, manage languages and adjust the general settings of the Paligo instance.	No access	IT admin license
Important Custom licenses are available on the Enterprise plan. These offer some ability to configure what features users have access to. For more information about what options are available to you, contact your account manager. Access to API, depends on license configuration.

Select the Applications tab.
Select Paligo to associate the Paligo application with the user group.
Select Save Group.
Repeat this procedure for all Paligo user groups.

Note

Next: Associate the JumpCloud User Accounts with the User Groups.

Associate the JumpCloud User Accounts with the User Groups

In JumpCloud, you need to associate the user accounts with the user groups that you have set up for Paligo.

Select Users.
Select the user you want to add to a Paligo user group.
Select the User Groups tab.
Select the checkbox for the Paligo user group that the user should belong to.
Select Save user.
Repeat this process for each user account that needs access to Paligo.

You can now Connect Paligo to your SSO Service.

Articles in this section

Note

Create a New Application Connector for Paligo in JumpCloud

Create User Groups in JumpCloud

Important

Note

Associate the JumpCloud User Accounts with the User Groups

Comments

Product

Resources

Support