Connect JumpCloud with Tallyfy using SAML-based Single Sign-On (SSO) for automatic user authentication and account creation. Setup takes about 30 minutes.
Requirements
JumpCloud administrator account
JumpCloud SSO Package or higher (or SSO add-on)
Tallyfy Professional or Enterprise plan
SAML configuration values from Tallyfy Support
Implementation process overview
Here’s what you’ll do:
Create a custom SAML application in JumpCloud
Configure service provider settings and attribute mappings
Exchange metadata with Tallyfy Support and enable SSO
Phase 1: Create JumpCloud SAML application
Step 1: Access SSO applications
Sign in to the JumpCloud Admin Portal
Navigate to User Authentication from the main menu
Select SSO Applications
Click the large + button to add a new application
In the window that appears, click Custom SAML App
Step 2: Configure general information
Select the General Info tab on the New Application form
Enter “Tallyfy” as the Display Label
Optionally add a description like “Tallyfy workflow management platform”
Optionally upload the Tallyfy logo for easy identification
Click Save to proceed
Phase 2: Configure SAML settings
Step 1: Obtain Tallyfy SAML values
First, grab Tallyfy’s service provider configuration - these tell JumpCloud where to send authentication information:
Contact Tallyfy Support to access your organization’s profile
Navigate to the Org Settings tab
Click on Add Configuration Details
Locate the default SAML values section
You’ll need these two values:
SP ACS URL (Assertion Consumer Service URL)
SP Entity ID (Service Provider Entity ID)
Step 2: Enter service provider details in JumpCloud
In your JumpCloud SAML application, select the SSO tab
IDP Entity ID: This is auto-generated by JumpCloud - leave as is
IDP URL: This is auto-generated by JumpCloud - leave as is
SP Entity ID: Enter the value from Tallyfy’s “SP Entity ID” field
ACS URL: Enter the value from Tallyfy’s “SP ACS URL” field
SAMLSubject NameID: Select email from the dropdown
Keep Default RelayState empty unless specified by Tallyfy Support
Step 3: Configure attribute statements
JumpCloud needs to know which user information to send to Tallyfy. Add these three attributes:
Scroll down to the User Attribute Mapping section
Click add attribute to add the first attribute
Configure the email attribute:
Service Provider Attribute Name: email
JumpCloud Attribute Name: Select email from dropdown
Click add attribute again for the first name
Configure the first name attribute:
Service Provider Attribute Name: FirstName
JumpCloud Attribute Name: Select firstname from dropdown
Click add attribute one more time for the last name
Configure the last name attribute:
Service Provider Attribute Name: LastName
JumpCloud Attribute Name: Select lastname from dropdown
After adding all three attributes, click Save
Your attribute mappings should look like this:
Service Provider Attribute
JumpCloud Attribute
email
email
FirstName
firstname
LastName
lastname
Phase 3: Configure Tallyfy with JumpCloud information
Step 1: Obtain JumpCloud SAML metadata
In your JumpCloud SAML application, stay on the SSO tab
Look for the IDP Certificate Valid section - this shows your X.509 certificate
Note down these three values (you’ll send them to Tallyfy Support):
IDP Entity ID (Identity Provider Entity ID)
IDP URL (Identity Provider Single Sign-On URL)
IDP Certificate (X.509 Certificate)
Alternatively, you can export the metadata XML file:
Click export metadata button at the bottom of the SSO tab
Save the XML file - you can send this entire file to Tallyfy Support
Step 2: Provide information to Tallyfy Support
Send the IDP Entity ID to Tallyfy Support
Send the IDP URL to Tallyfy Support
Send the X.509 Certificate to Tallyfy Support (or send the metadata XML file)
Tallyfy Support will configure these values in your organization’s SAML settings
Wait for confirmation from Tallyfy Support that configuration is complete
Step 3: Activate and assign users
Once Tallyfy Support confirms your settings are configured:
In JumpCloud, navigate to the User Groups tab in your Tallyfy application
Select the user groups or individual users who should have access to Tallyfy
Click Save
Toggle the application to Active status
In Tallyfy (coordinating with Support), toggle the SAML activation switch to enable SSO for your organization
User provisioning and access
Once everything’s configured:
Get the Tallyfy SSO login URL from Tallyfy Support
Share this URL with your users who have been assigned to the JumpCloud application
Optionally, users can also access Tallyfy through their JumpCloud user portal
Here’s what happens for your users:
Already have a Tallyfy account? They’ll log in automatically using their JumpCloud credentials
Don’t have an account yet? Tallyfy creates one on their first login using the attributes from JumpCloud
SSO authentication flow
This shows the complete authentication process from setup to user access.
What to notice:
Steps 1-11 show the one-time setup collaboration between your Admin, JumpCloud, and Tallyfy Support
Steps 12-18 demonstrate the actual user authentication flow that happens every login
Tallyfy automatically creates accounts for new users (step 17) using the email and name attributes from JumpCloud
Users can access Tallyfy either through the SSO URL or through their JumpCloud user portal
Troubleshooting
Can’t log in? Check these things first:
Is the user assigned to the JumpCloud application?
Are the attribute mappings exact? (names and formats are case-sensitive)
Is the X.509 certificate still valid in JumpCloud?
Are users using the SSO URL or JumpCloud portal - not the regular Tallyfy login page?
Is the application status set to Active in JumpCloud?
Still stuck? Contact Tallyfy Support
JumpCloud-specific notes
JumpCloud has some unique characteristics compared to other identity providers:
Certificate management: JumpCloud automatically generates and manages certificates for you when you activate an application. These certificates are automatically renewed, but you should monitor their expiration dates in the JumpCloud Admin Portal.
User portal access: Once configured, users can access Tallyfy through their JumpCloud user portal alongside other applications, creating a unified access point for all company tools.
Just-in-time provisioning: JumpCloud supports JIT provisioning, which means user accounts in Tallyfy are created automatically on first login without requiring manual provisioning or SCIM integration.
Group-based access: You can control Tallyfy access by assigning JumpCloud user groups rather than individual users, making it easier to manage access for teams and departments.
Okta SAML/SSO integration with Tallyfy enables automatic user authentication and account creation through a three-phase setup process involving creating an Okta SAML application configuring settings in both systems and coordinating with Tallyfy Support to exchange configuration metadata for seamless single sign-on within 30 minutes.
OneLogin SAML/SSO integration with Tallyfy enables automatic user authentication through OneLogin credentials via a collaborative setup process that involves creating a SAML application connector configuring authentication settings and working with Tallyfy Support to exchange configuration details for seamless single sign-on with automatic user provisioning.
Microsoft Entra ID SSO integration with Tallyfy provides seamless single sign-on authentication and automatic user provisioning through a collaborative 30-minute setup process that involves creating an enterprise application configuring SAML settings and coordinating with Tallyfy Support to exchange configuration details.
Tallyfy offers free SSO integration with enterprise identity providers like Microsoft Entra ID Google Workspace Okta OneLogin and JumpCloud allowing teams to use corporate credentials for secure authentication while also enabling SSO-based approvals as a cost-effective alternative to traditional e-signature solutions for internal company processes.
