AirMason

Find the AirMason Employee portal URL:

In this article, we'll be referencing this URL at a couple of places. You will need your admin to add you to AirMason to find this. You can figure out what to use there by going to Manage Organization &gt; Configuration

If you've custom domain setup on AirMason 

then your Organization URL will be your custom domain (Eg: handbooks.johnsmithweb.com)

otherwise it will be books.airmason.com/&lt;company-handle&gt;, where &lt;company-handle&gt; is company handle that you've set up. (Eg: books.airmason.com/johnsmith)

- then your Organization URL will be your custom domain (Eg: handbooks.johnsmithweb.com)
- otherwise it will be books.airmason.com/&lt;company-handle&gt;, where &lt;company-handle&gt; is company handle that you've set up. (Eg: books.airmason.com/johnsmith)

___________________________________________________________

Please follow the steps below on setting up AirMason on JumpCloud

Login into <a href="https://console.jumpcloud.com" target="_blank" rel="nofollow noopener noreferrer">https://console.jumpcloud.com</a>

Click SSO tab from Menu, then click Plus button

Click the Custom SAML App button from the popup

Enter the Display Label as AirMason app

Click the SSO tab and fill in the following configurations: IDP Entity ID: <a href="#h_5dd7264724" target="_blank">[AirMason employee portal URL]</a> SP Entity ID: <a href="#h_5dd7264724" target="_blank">[AirMason employee portal URL] </a> ACS URL: <a href="#h_5dd7264724" target="_blank">[AirMason employee portal URL]</a>/jumpcloud/saml2 SAML Subject NAMEID: email SAMLSubject NAMEID Format: urn:oasis:names:c:SAML:1.1:nameid-fommat:emailAddress Attributes mapping:

Copy the full IDP URL and paste it into SAML 2.0 ENDPOINT (HTTP) on AirMason

In Users &amp; Groups tab, provide access to specific users and click Activate

Now that your SSO is set up on JumpCloud, let's set up the AIrMason side. Download the certificate:

1. Click on the AirMason App
2. Click on the IDP certificate Valid
3. Click Download certificate and paste the value into the certificate on AirMason.

1. Login into <a href="https://console.jumpcloud.com" target="_blank" rel="nofollow noopener noreferrer">https://console.jumpcloud.com</a>
2. Click SSO tab from Menu, then click Plus button 
 
 
3. Click the Custom SAML App button from the popup 
4. Enter the Display Label as AirMason app
5. 
 Click the SSO tab and fill in the following configurations: IDP Entity ID: <a href="#h_5dd7264724" target="_blank">[AirMason employee portal URL]</a> SP Entity ID: <a href="#h_5dd7264724" target="_blank">[AirMason employee portal URL] </a> ACS URL: <a href="#h_5dd7264724" target="_blank">[AirMason employee portal URL]</a>/jumpcloud/saml2 SAML Subject NAMEID: email SAMLSubject NAMEID Format: urn:oasis:names:c:SAML:1.1:nameid-fommat:emailAddress Attributes mapping:
 
 
6. Copy the full IDP URL and paste it into SAML 2.0 ENDPOINT (HTTP) on AirMason 
7. In Users &amp; Groups tab, provide access to specific users and click Activate 
 
 
8. Now that your SSO is set up on JumpCloud, let's set up the AIrMason side. Download the certificate: 
 1. Click on the AirMason App
 2. Click on the IDP certificate Valid
 3. Click Download certificate and paste the value into the certificate on AirMason.

Connecting Okta SSO app to AirMason:

Login to <a href="http://admin.airmason.com" target="_blank" rel="nofollow noopener noreferrer">AirMason Admin</a> and go to <a href="https://admin.airmason.com/integrations/" target="_blank" rel="nofollow noopener noreferrer">Integrations</a> page

Click on Connect next to JumpCloud

Fill in the following information: Issuer URL:<a href="#h_5dd7264724" target="_blank"> [AirMason Employee portal URL]</a> SAML 2.0 Endpoint (HTTP): <a href="#h_04d18ffb37" target="_blank">Step 6</a>

Certificate (X.509 Certificate): <a href="#h_855b01259e" target="_blank">Step 8</a>

1. Login to <a href="http://admin.airmason.com" target="_blank" rel="nofollow noopener noreferrer">AirMason Admin</a> and go to <a href="https://admin.airmason.com/integrations/" target="_blank" rel="nofollow noopener noreferrer">Integrations</a> page
2. Click on Connect next to JumpCloud
3. Fill in the following information: Issuer URL:<a href="#h_5dd7264724" target="_blank"> [AirMason Employee portal URL]</a> SAML 2.0 Endpoint (HTTP): <a href="#h_04d18ffb37" target="_blank">Step 6</a>
 Certificate (X.509 Certificate): <a href="#h_855b01259e" target="_blank">Step 8</a>

Testing JumpCloud SSO as employee:

Go to your <a href="#h_5dd7264724" target="_blank">AirMason Employee portal URL</a>. It should show you login page for viewing your handbooks

It should take you to login using JumpCloud SSO credentials (if you are not logged in)

Once you log in, it should bring you back to AirMason and you should be able to view handbooks you've access to (similar to what is shown below).

1. Go to your <a href="#h_5dd7264724" target="_blank">AirMason Employee portal URL</a>. It should show you login page for viewing your handbooks
2. Click on "Login with JumpCloud"
3. It should take you to login using JumpCloud SSO credentials (if you are not logged in)
4. Once you log in, it should bring you back to AirMason and you should be able to view handbooks you've access to (similar to what is shown below).

**Find the AirMason Employee portal URL:**

Setting up AirMason app on Okta:

Copy the full IDP URL and paste it into SAML 2.0 ENDPOINT (HTTP) on AirMason

Now that your SSO is set up on JumpCloud, let's set up the AIrMason side.
Download the certificate:

Click on the AirMason App

Click on the IDP certificate Valid

Click Download certificate and paste the value into the certificate on AirMason.

Connecting Okta SSO app to AirMason:

Testing JumpCloud SSO as employee: