Skip to main content
Unlisted page
This page is unlisted. Search engines will not index it, and only users having a direct link can access it.
Version: 1.18.1

JumpCloud

This example assumes the use of JumpCloud LDAP-as a Service with the following configurations.

  • A User Group named Kasm Users that is bound to LDAP. Only users that are members of this group should be allowed to authenticate to Kasm

    • Users named kasm-user-1 and kasm-admin-1 are a member of this group.

  • A User Group group named Kasm Admins that is bound to LDAP. Users that are a member of this group will be placed in Kasm's Administrators group

    • A user named kasm-admin-1 is a member of this group.
    LDAP Groups
    LDAP Groups

  • A user account named kasm-ldap-svc is configured as an LDAP Binding User

    LDAP Users
    LDAP Users

Kasm LDAP Configuration​

  • Log into the Kasm Web UI as an administrator
  • Click Access Management -> Authentication -> LDAP
  • Click on Add Configuration
  • Enter the following information , substituting the example Organization ID 633df00190c6d619236d3ae1 with your own.
PropertyValue
NameJumpCloud
URLldaps://ldap.jumpcloud.com:636
Search Baseou=Users,o=633df00190c6d619236d3ae1,dc=jumpcloud,dc=com
Search Filter&(objectClass=inetOrgPerson)(uid={0})(memberOf=cn=Kasm Users,ou=Users,o=633df00190c6d619236d3ae1,dc=jumpcloud,dc=com)
Group Membership Filter(&(objectClass=groupOfNames)(member={0}))
Email Attributemail
Service Account DNuid=kasm-ldap-svc,ou=Users,o=633df00190c6d619236d3ae1,dc=jumpcloud,dc=com
Service Account Passwordpassword
Search SubtreeChecked
Auto Create App UserChecked
EnabledChecked

LDAP Group Mapping​

The following settings can be used to map the JumpCloud Kasm Admins group to the Kasm Workspaces build in Administrators Group.

See Create LDAP linked Group for more details.

Settings for the SSO Group Mapping screen

PropertyDescription
SSO ProviderLDAP - Kasm Test LDAP Settings
Assign All UsersUnchecked
Group Attributescn=Kasm Admins,ou=Users,o=633df00190c6d619236d3ae1,dc=jumpcloud,dc=com

Verifying Configurations​

  • Verify you can log into the Workspaces UI with user. kasm-user-1@jumpcloud.com.
  • Verify you can log into the Workspaces UI with user. kasm-admin-1@jumpcloud.com. Once authenticated the user should now have access to administrative functions within the app.
  • Attempting to log into Workspaces as any other user that is NOT a member of the JumpCloud Kasm Users group should not succeed.

Helpful References​