> For the complete documentation index, see [llms.txt](https://docs.debricked.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.debricked.com/tools-and-integrations/single-sign-on-sso/single-sign-on-sso-through-jumpcloud-oidc.md).

# Single Sign-On (SSO) through JumpCloud OIDC

{% hint style="info" %}
*This feature is currently only available for* [*SCA Enterprise*](https://debricked.com/pricing/) *customers.*
{% endhint %}

This article details how to configure JumpCloud OIDC as the primary Identity Provider to facilitate SSO with Fortify SCA. For details regarding integration with other Identity Providers, see [Single Sign-On (SSO)](/tools-and-integrations/single-sign-on-sso.md).

### Adding a new application <a href="#addinganewapplication" id="addinganewapplication"></a>

1. In your JumpCloud Admin portal, click **SSO** under **User Authentication** in the sidebar.
2. Click **+ Add new application** at the top of the page.
3. Once the applications modal is open, click **Custom OIDC App** to start setting up the Fortify SCA integration.

### Configuring Fortify SCA application <a href="#configuringthedebrickedapp" id="configuringthedebrickedapp"></a>

After clicking on **Custom OIDC App** you will be asked to name the new application. It is suggested to provide an easily recognizable name, for example, “Debricked” or “Debricked SSO”.

Select the **SSO** tab and complete the configuration:

1. In the **Redirect URIs** input, set: \*<https://debricked.com/app/sso/oidc/auth\\>\*.
2. The **Client Authentication Type** should be set to “**Client Secret Basic”.**
3. Set the **Login URL** to: \*<https://debricked.com/app/sso/oidc/login\\>\*.
4. Add three parameters to the **Attribute Mapping** section to enable Fortify SCA to fetch the necessary user data. On the left, you can find the attribute names (make sure they are spelled correctly) and on the right the corresponding JumpCloud name. The mapping is as follows:

* email → email
* given\_name → firstname
* family\_name → lastname

Now that everything is set up, you can click **Activate** at the bottom right of the page to save the application.

JumpCloud will now present you with the ClientID and Client Secret which you will need to send to the Fortify SCA support team to complete the integration.

### Communicating data with Fortify SCA <a href="#communicatingthedatawithdebricked" id="communicatingthedatawithdebricked"></a>

To complete the integration, enter the following information:

* **Issuer URL** (the URL used to fetch OIDC information)
* **Email Domains** (the email domains which will be designated to your organization)
* **Client ID** (identifier of the Fortify SCA integration)
* **Client secret** (secret to authorize the integration, also provided when installing the integration in your IdP)

You can forward it to us by either:

* Getting in touch with the support team at [***support@debricked.com***](mailto:support@debricked.com)
* Submitting the configuration data through an API endpoint at <https://debricked.com/api/1.0/open/sso/oidc/request>

### Adding users <a href="#addingusers" id="addingusers"></a>

Note that in order for your users to be able to use this application you will need to assign them to the new application you have created. To do so, click the Fortify SCA application from your JumpCloud Admin Portal and go to the **User Groups** tab, from here you will be able to assign user groups to this application

Once your users are added, they can direct log in from <https://debricked.com/app/sso/login> . You can also invite them from Fortify SCA (keep in mind that they must be assigned to the application on your vendor side) from your Admin Tools. This invite will be a special *SSO invite*, which will redirect them to your Identity Provider and let them log in to Fortify SCA.

### Testing setup <a href="#testingthesetup" id="testingthesetup"></a>

Once your integration has been added to your enterprise account, you can enable it in the Fortify SCA web tool by visiting the **User Permissions** tab in **Admin Tools**.

Head over to <https://debricked.com/app/sso/login>, type enterprise email ID (the same email domain which you submitted before). You should be redirected to your Identity Provider and be able to authenticate. After logging in, you will be redirected and logged in to Fortify SCA as well.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.debricked.com/tools-and-integrations/single-sign-on-sso/single-sign-on-sso-through-jumpcloud-oidc.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.