Single Sign-On (SSO)

JumpCloud’s SSO goes beyond application access to provide a single identity that can access any IT resource, from applications to devices, networks and more. Backed by a robust directory platform, you can onboard, offboard, and manage the lifecycle of every user with a single set of credentials. With one identity per user, you can easily provision and deprovision user access to devices (MacOS, Windows, and Linux), on-premise applications, networks and VPN, and servers from a single, secure console.

JumpCloud uses user groups to centralize access to applications. You can create User Groups for teams (for example, Product Management) and assign application access at the group level. If you add a new user to this group, then they are immediately granted access to the same applications as all other users in the group. Similarly, if a user leaves the company or is no longer part of this group, then removing them from the group is all it takes and their access to those applications are revoked.

• A: Through JumpCloud conditional access policies, admins can add an extra layer of security on top of the User Portal and applications. With these policies, users may only have access to company resources from trusted devices, networks, and/or locations as determined by specific, customizable conditions, or require the use of multi-factor authentication (MFA) for entry via unknown sources. Admins can apply conditional access policies by User Group(s) or for all users.
  • Conditional access policies are a necessary step to secure access, as not all applications may require enhanced security themselves. For example, a user group of engineers need access to both AWS SSO and Zoom. There is sensitive data within AWS that needs to be protected from unknown devices and networks, but Zoom is relatively benign. With a few clicks, an admin could create a conditional access Policy to require MFA for all access requests from untrusted devices and networks to AWS, but engineers in the engineer user group will still be able to access Zoom from all devices.

Yes! In addition to provisioning and deprovisioning application access, admins can also use an employee’s credentials to provision or deprovision access to their MacOS, Windows, or Linux device(s).

We recommend that you Request a Demo from our team.