SSO setup: JumpCloud

1. JC → SSO → Add Application → SAML/SCIM → Custom SCIM
2. Endpoint: https://api.unimoni.example.com/api/v1/scim/v2
3. Token: scim_*
4. User Groups → Provision → select the groups

JC uses a slightly different PATCH format for group members (Azure AD-style value=[{value:uid}] without an RFC filter). Unimoni supports both variants.