Skip to content

SSO

Project: Arlyn Labs — all applications
Date: April 2026

This section covers how employee access to Arlyn Labs applications is managed — including the SSO integrations between JumpCloud and both Cloudflare Access and AWS.

Documents

  • Protect Public Site — Per-app runbook covering both the JumpCloud SSO application and Cloudflare Access Application record needed to gate each new app behind employee SSO
  • Cloudflare SSO Setup — One-time account-level configuration: adding JumpCloud as the SAML identity provider, creating the shared access policy, and restricting login methods
  • AWS SSO Setup — SAML 2.0 federation between JumpCloud and AWS IAM: architecture, setup sequence, attribute mapping, and multi-role patterns
  • AWS CLI via SSO — How to authenticate to AWS from the terminal using saml2aws and your JumpCloud credentials