Skip to main content

JumpCloud Single Sign-On (SSO) Setup Guide

This guide walks you through setting up JumpCloud Single Sign-On (SSO) with Kadence using a SAML-based integration.

Liza avatar
Written by Liza
Updated yesterday

Once configured, users will be able to sign in to Kadence using their JumpCloud credentials—without needing a separate password.


🛠️ Prerequisites

Before setting up JumpCloud SSO, make sure that:

  • You have an active JumpCloud account

  • You are a Global Admin in Kadence

  • You have admin access to the JumpCloud Admin Console, or support from your JumpCloud admin

To log in via JumpCloud SSO, users must have a Kadence account with the same email address as their JumpCloud user account.


🔧 Step 1: Open JumpCloud integration steps in Kadence

  1. Navigate to Settings → Integrations

  2. Under Single Sign-On (SSO), select JumpCloud

  3. Click Set up single sign-on

  4. Select JumpCloud SAML from the Providers list

  5. Follow the steps here to collect your unique Kadence credentials, and enable the JumpCloud SSO integration


🔧 Step 2: Test Single Sign-On

Test signing in with JumpCloud to confirm the integration is working correctly.

If successful, users assigned to the application will be able to authenticate via SSO.


🔧 Step 3: Logging in with JumpCloud SSO

Once JumpCloud is integrated and working, users can log in by:

  1. Clicking the JumpCloud icon under the login form

  2. Entering their email address

  3. Authenticating via OneLogin

  4. Being redirected back to Kadence


🔒 Step 3: Enforce Single Sign-On (Optional)

To prevent users from bypassing JumpCloud by setting or resetting passwords, we recommend blocking specific automated emails.

🛑 Block “Welcome to Kadence” Emails

When users are provisioned, Kadence may send a welcome email prompting them to set a password. Blocking this ensures users only access Kadence via SSO.

Block or filter emails from: [email protected]

Filter by subject line: Welcome to Kadence

Do not block all emails from this address. Other critical notifications (such as check-in reminders and booking confirmations) are also sent from this domain.


🔐 Block Password Reset Emails (SSO Recommended)

If your organisation uses Single Sign-On, blocking password reset emails prevents users from bypassing SSO authentication.

Block or filter emails from: [email protected]

Filter by subject line: Reset your password

Do not block all emails from this address. Blocking only this subject ensures SSO remains enforced while preserving essential notifications.


🔄 When should I apply these blocks?

We recommend applying these email filters:

  • Before enabling SSO, or

  • Before syncing users into Kadence, especially via Directory Sync

This ensures users only authenticate using OneLogin from day one.


❓ FAQs

Do users need matching emails in JumpCloud and Kadence?

Yes. Email addresses must match exactly.

Can I limit access to specific groups?

Yes. Only users assigned to the application can authenticate.

Does Kadence support IdP-initiated and SP-initiated login?

No — both flows are not currently supported for JumpCloud.


💬 Need Help?

For support, reach out to:
📩 [email protected]

For more helpful articles see:
📚 Kadence Help Center

Did this answer your question?