Skip to main content

JumpCloud Single Sign-On (SSO) Setup Guide

This guide walks you through setting up JumpCloud Single Sign-On (SSO) with Kadence using a SAML-based integration.

Liza avatar
Written by Liza
Updated this week

Once configured, users will be able to sign in to Kadence using their JumpCloud credentials—without needing a separate password.


Prerequisites

Before setting up JumpCloud SSO, make sure that:

  • You have an active JumpCloud account

  • You are a Global Admin in Kadence

  • You have admin access to the JumpCloud Admin Console, or support from your JumpCloud admin

To log in via JumpCloud SSO, users must have a Kadence account with the same email address as their JumpCloud user account.


Before You Begin

You may want to enforce SSO as an organization to prevent users logging into Kadence and bypassing the SSO authentication.

To fully enforce SSO and prevent users from bypassing JumpCloud by setting or resetting passwords, we strongly recommend blocking specific automated Kadence emails before or during rollout.

If you do not wish to enforce SSO and want your users to be able to login without SSO, skip to Step 1.


Block “Welcome to Kadence” Emails

When users are provisioned, Kadence may send a welcome email prompting them to set a password. Blocking this ensures users only access Kadence via SSO.

Block or filter emails from: [email protected]

Filter by subject line: Welcome to Kadence

Welcome to Kadence email

Do not block all emails from this address. Other critical notifications (such as check-in reminders and booking confirmations) are also sent from this domain.


Block Password Reset Emails (SSO Recommended)

If your organisation uses Single Sign-On, blocking password reset emails prevents users from bypassing SSO authentication.

Block or filter emails from: [email protected]

Filter by subject line: Reset your password

Reset your password email

Do not block all emails from this address. Blocking only this subject ensures SSO remains enforced while preserving essential notifications.


When should I apply these blocks?

We recommend applying these email filters:

  • Before enabling SSO, or

  • Before syncing users into Kadence, especially via Directory Sync

This ensures users only authenticate using JumpCloud SSO from day one.


Step 1: Open JumpCloud integration steps in Kadence

  1. Navigate to Settings → Integrations

  2. Under Single Sign-On (SSO), select JumpCloud

  3. Click Set up single sign-on

    Set up Single Sign-On

  4. Click Continue

    Add JumpCloud SSO

  5. Select JumpCloud SAML from the Providers list

    Select identity provider

  6. Follow the steps here to collect your unique Kadence credentials, and enable the JumpCloud SSO integration

    JumpCloud SSO Instructions

Step 2: Logging in with JumpCloud SSO

Once JumpCloud is integrated and working, users can log in by:

  1. Navigate to Kadence

  2. Clicking the JumpCloud icon under the login form

    Kadence Login Form

  3. Entering their email address

  4. Authenticating via JumpCloud

    Login with JumpCloud

  5. Being redirected back to Kadence


FAQs

Do users need matching emails in JumpCloud and Kadence?

Yes. Email addresses must match exactly.

Can I limit access to specific groups?

Yes. Only users assigned to the application can authenticate.

Does Kadence support IdP-initiated and SP-initiated login?

No — both flows are not currently supported for JumpCloud.


Need Help?

For support, reach out to:
📩 [email protected]

For more helpful articles see:
📚 Kadence Help Center

Did this answer your question?