---
title: "JumpCloud 3rd party authentication"
slug: "jumpcloud-3rd-party-authentication-smp"
status: "update"
updated: 2026-09-08T12:27:09Z
published: 2026-09-08T12:27:09Z
canonical: "help.nordlayer.com/jumpcloud-3rd-party-authentication-smp"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.nordlayer.com/llms.txt
> Use this file to discover all available pages before exploring further.

# JumpCloud 3rd party authentication

In order to enable JumpCloud as a login option for the end users, you will need to do the following:

1. Log in to the JumpCloud Administrator Console at [https://console.jumpcloud.com](https://console.jumpcloud.com)
2. Go to **USER AUTHENTICATION → SSO**.
3. Click **(+ Add New Application)** to configure a new application.
4. Click **Custom OIDC App**.
5. Enter a **Display Label** in the **General Info tab**. You can enter a description and adjust the logo shown for the application.
6. Optionally, deselect **Show this application in User Portal. Note**: This will ensure users log in through NordLayer.
7. Select the **SSO** tab.
8. In the **Redirect URIs** field, enter:

```
https://auth.nordlayer.com/v1/tokens/oauth/resolution
```

1. Under **Client Authentication Type**, select **Client Secret Post**.
2. In the **Login URL**, enter:

```
https://cp.nordlayer.com/login
```

1. Navigate down to **Attribute Mapping** (optional) → **USER ATTRIBUTE MAPPING**, and click **Add Attribute**.
2. In **Service Provider Attribute Name**, type “email”.
3. In **JumpCloud Attribute Name**, select **email**.
4. Click **activate**.
5. On the **Application Saved** window, copy the **Client ID** and **Client Secret**.

**Note**:

The Client Secret will only be shown once. Copy it to a secure location for future reference.

1. Click **Got It**.

Now once you’ve set up JumpCloud, go to the **NordLayer Control Panel** and do the following:

1. Go to **Settings** → **Login methods**.
2. Under **Single sign-on** enable **JumpCloud**.
3. Enter the **Client ID** and **Client Secret** generated in the previous section.
4. Click **Save**.

Note:

- Single-Sign-ON (SSO) will be enabled on Control Panel, VPN apps and Browser Extension
- You can have multiple SSO options listed for authentication
- It is possible to remove email & password authentication, leaving SSO as the only option to sign in

---

Other available SSO providers include Azure, Google, Okta and OneLogin. You can set them up in the Service Management Portal by following these guides:

- [Entra ID (Azure AD) 3rd party authentication](/docs/azure-ad-3rd-party-authentication-smp)
- [Google SSO 3rd party authentication](/docs/google-sso-3rd-party-authentication-smp)
- [Okta 3rd party authentication](/docs/okta-3rd-party-authentication-smp)
- [OneLogin 3rd party authentication](/docs/onelogin-3rd-party-authentication)

---

**Note**: In case you have any questions or issues, press '**Chat with support**' at the bottom of the page.