Configuring Conditional Access Policies For Admin Portal

Conditional Access Policies (CAP) is a security strategy that provides granular control over who can access resources, under what circumstances, and from where. CAP can be configured for Admin Portal as a resource. All the conditions that apply to User Portal or SSO Applications are applicable, allowing higher security and least privilege access control for Admins.
It is highly recommended to configure CAP for Admin Portal to ensure the highest security for your crucial resources.
Admins in your JumpCloud org can be of the following two types: 

• Standalone Admins with their own credentials and Multi-Factor Authentication (MFA).
• Users with admin roles assigned to them - either by creating Admins from existing users or editing existing standalone Admins to their matching users in JumpCloud.
  • One credential for users and Admins - Allowing single credential login and management.
  • All Advanced MFA options are now available apart from TOTP.

CAP for the admin portal will only apply to Admins who are bound to their users.

Configuring a Conditional Access Policy for Admin Portal

To configure a conditional access policy for Admin portal:

1. Log in to the JumpCloud Admin Portal.
2. Go to SECURITY MANAGEMENT > Conditional Policies.
3. From the list view, click ( + ), then select Admin Portal as the resource.
   
4. Enter the Policy Name and Description.
5. Under Assignments, click All Admins to add all the users who are Admins.
   

Alternatively, click Select User Groups if you want to assign a policy only to a specific group of Admins. After selecting this option, you can also click Manage User Groups to create an Admins Only user group. See Creating a User Group for Users With Admin Roles to learn more.

Search and exclude user groups as required.

6. Apply conditions as required.
7. Under Action, customize the conditional access deny message for users as required.
   Note: For Admin Portal CAP, the default action is Deny.
8. Click Create Policy.
   You have successfully created a conditional access policy for Admin Portal.