Q3 2023 Roadmap Webinar Recap

Written by David Worthington on September 7, 2023

Share This Article


Contents


JumpCloud delivers the optionality that small and medium-sized enterprises (SMEs) need to future-proof against changing business requirements without being locked into a single vendor. Our open directory platform makes this possible with a more service-oriented approach that uses federation and modern authentication to secure access, employs automation for dynamic groups, offers more deployment options, and delivers support for the latest OS releases. We’re also hard at work strengthening platform security, enhancing the administrative experience, and responding to customers’ requests that go deeper toward improving the present areas of the platform.

This webinar recap explores what’s arriving in Q3 to give you the freedom and flexibility to access resources with as little friction as possible, no matter where your identities come from.

Open Directory Platform

The open directory platform is extending its directory federation, introducing a new phishing-resistant login experience, and expanding its connectors for HR systems. 

Open Directory Federation

computer graphic with "Login with Okta" screen showing

Federation leverages web standards to make JumpCloud services available for customers that may not want to use it as their primary identity provider (IdP). We’re introducing the ability to use Okta as your IdP for the Device Login Screen as the first option for external IdPs. Okta’s service doesn’t have integrated unified endpoint management (UEM), and federation makes it easier to adopt JumpCloud to manage devices for better compliance and security. This feature doesn’t replace existing password sync functionality; it adds a different mode of deployment.

There will be additional IdPs and more Login Screens to come.

JumpCloud Go

JumpCloud Go is a hardware-bound credential that leverages TPMs on PCs and Secure Enclave on Apple silicon. That’s just the technology. The experience provides you with the fastest way to sign a managed device into the JumpCloud User Portal  using the Chrome browser. Users first sign in with a password and multi-factor authentication (MFA) before a phishing-resistant token is assigned to the device to make logins simpler and more secure.

This experience will soon become the new method for macOS and Windows device logins, tying cloud identities to local accounts for better self-service. Additional features such as continuous access evaluation will be added over time to reduce MFA/login fatigue and improve security.

JumpCloud login screenshot

Deeper Active Directory (AD) Support

JumpCloud is increasing its focus on Active Directory with foundational changes to Active Directory Integration (ADI) syncing to import identities from AD. It’s also becoming much easier to scale with a new deployment model that uses a member server versus a domain controller to configure syncing. That makes it possible to sync multiple domains to JumpCloud at once. We’re also rolling out delegated authentication (think of it as passthrough authentication) to leverage existing credentials from AD without forcing password resets.

Other major improvements include:

  • Microsoft Server 2022 support for import and sync
  • An optional password sync agent
Active Directory Domain graphic flow chart

Human Resource Information System (HRIS) Integrations 

New HRIS Integrations

JumpCloud is rolling out additional pre-built HRIS integrations over this quarter and next that are available for free. HRIS integrations help to streamline identity lifecycle management via dynamic groups that make or suggest membership changes if a user’s role is modified by human resources.

In contrast, Microsoft’s Entra ID may now require additional licenses, on top of its Premium 1 and Premium 2 tier SKUs, for lifecycle workflows that handle HR provisioning aspects of the identity lifecycle management process. Its other options include SSO connectors with write-back.

Core Device Management

JumpCloud is deepening its UEM capabilities to deliver best-in-class management, and we’re extending background access within remote assistance. Dynamic groups now manage device group memberships based upon device attribute-driven rules.

Windows MDM

Windows MDM enrollment screen

JumpCloud launched self-enrollment for Windows MDM earlier this year to deliver tamper-proof device management. Automated MDM enrollment is the next stop on the MDM roadmap. It will include automatic certificate renewal with agent enrollment including the MDM profile as an option. Provisioning Package enrollment provides a light touch deployment model where a preconfigured Windows onboarding workflow can be generated for new PCs, either in house or through an IHV. You will no longer have to deal with the out-of-the-box experience.

We’ve partnered with Hofy to enable an all-in-one device onboarding solution worldwide.

Android Enterprise Mobility Management (EMM)

Admin Android Configuration enrollment screen

JumpCloud’s Android EMM initially supported BYOD and COPE devices through a work profile partition. It will soon offer the option for fully managed corporate-owned devices. JumpCloud intends to also manage ruggedized devices for frontline workers in the future.

Other upcoming features include:

  • Enhanced policies
  • Zero-touch enrollment

Same-Day New OS Support

JumpCloud is ready for the fall OS release schedule:

  • Android 14 – Day Zero Support
  • macOS 14 – Day Zero Support
  • iOS 17 – Day Zero Support

Background Access

JumpCloud remote assistance screen

JumpCloud’s remote assistance is being enhanced to take actions on managed devices through silent modes that will have a low impact on users. Features will include:

  • Remote command line interface and file manager straight from the browser
  • Transfer large files without FTP, USB, or unsanctioned apps

Dynamic Groups & Work Orchestration

New Device Groups Membership Controls in JumpCloud

Dynamic groups provide easy, efficient device administration. Its architecture is built on commonly leveraged user and device attributes and operators. Dynamic groups create insights that translate into actions, such as proactively changing group memberships and enforcing MFA for users, or executing commands and installing apps.

Dynamic groups features include:

  • Fully automated dynamic user and device groups
  • Additional operators and attributes
  • Dynamic MDM enrollment groups (coming soon)

JumpCloud provides this capability without requiring a “premium” license. New organizations will benefit from attribute-driven rules as soon as they start to add devices to the directory.

Platform Enhancements

JumpCloud Password Manager, JumpCloud Protect, and cloud directories are also receiving enhancements.

computer and phone graphic with password manager on the screens

Password Manager (PWM)

Customers asked for more governance over auditing and sharing, and JumpCloud delivered. New features slated for Q3 include:

  • Cloud Backup (now available)
  • A “soft landing” for users removed from the PWM entitlement group 
  • Better shared folder creation (with restrictions) and activity logging from the Admin portal
  • The ability to configure PWM App defaults from the Admin portal

JumpCloud Protect

JumpCloud Protect phone screenshot

MFA push notifications are now more convenient than ever when actioned from the lock screen. App updates are available for iOS and Android and now features support for Apple Watch. Significantly, MFA prompts may be biometrics protected for added security.

Admin Email Notifications

We’re refining the user experience for M365 directory sync with an email notification when it’s time to refresh tokens in Entra ID. It’s an extra “nudge” on top of the existing portal notification.

Platform Security

Additional security controls are being added to the Admin Portal including MFA enabled for admin users by default, stronger password requirements for users, password policies that can be assigned to groups, and more robust API key management.

API Key generation

Q3 marks the beginning of more robust lifecycle management for API keys. The first round of enhancements, which mirror guidance from the U.S. National Institute of Standards and Technology (NIST), will include:

  • Restricting Admin API key access to admins with billing roles to establish a lifecycle workflow
  • Restricting API Key visibility beyond the first time a key is generated
  • More activity logging for API key events such as when old keys are used

Over time, JumpCloud intends to introduce additional security controls such as key rotation policies, offering more granular scoping to actions for API keys with more defined lifetimes. The ultimate goal of this initiative is to deliver a stronger and more secure platform via API.

Schedule a Free Demo

Schedule a free demo to learn more about these new features. Sometimes self-service doesn’t get you everything you need. If that’s how you’re feeling, schedule a demo to discuss and learn more about our options for implementation assistance, migration services, custom scripting, and more.

David Worthington

I'm the JumpCloud Champion for Product, Security. JumpCloud and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.

Continue Learning with our Newsletter