JumpCloud Password Manager for Admins

JumpCloud offers a full feature password manager that is integrated into the JumpCloud product and all of our single sign-on applications. Admins and users will have a seamless authentication experience without relying on a third-party solution.

After User Groups are enrolled in Password Manager, admins can manage identity, access, and devices from within the admin console.
Learn More: Enroll Users in JumpCloud Password Manager

Overview Page

The Password Manager Overview page shows basic information about Pending Invites, Shared Folders, Enrolled Groups, Password Health, Devices, App Versions, and Logs.

• Selecting the View All button in Pending Invites, Enrolled Groups, or Shared Folders will bring up a modal with details.
• Password Health information shows the admin an overall password health score along with the number of old and reused passwords in the organization.
  • Weak passwords are determined by if the password uses common words, names, or keyboard patterns, or if it’s not long enough and doesn’t contain a mixture of character types.
  • Old passwords are anything older than 90 days.
  • Reused passwords are any that are the same or similar to other passwords for that user. 
• Knowing Device and App versions can be an important troubleshooting tool, especially to make sure that users are on the most recent version of the Password Manager application.
• The Logs section shows user events within Password Manager.
  • Selecting the Activity Log link will open Directory Insights, with the Service dropdown pre-filtered to Password Manager and Time Range defaulted to Last 15 days.

Users

The Password Manager Users page shows a list of enrolled users, with email, group, service status, and password health.

• Clicking on the extra options menu at the end of each User’s line gives you the option to Revoke Access or send the Invitation Email to Password Manager.
• Clicking on the name of a user will open a details page for that user.
  

• ​​​​​​​You will see details of the user along with password health information and vault information. The selections on the right help navigate to different areas of the page.
• The Logs section shows activities for this particular user. Selecting the Activity Log link will open Directory Insights, with the Service dropdown pre-filtered to Password Manager, the User pre-selected, and Time Range defaulted to Last 15 days.

Shared Folders

The Password Manager Shared Folders shows a list of shared folders within your enrolled user groups, along with password health.

• Clicking on the name of the Shared Folder will open a details page for that folder.
  

• You will see details of the folder along with password health information. The selections on the right help navigate to different areas of the page.
• From the Users with Access area you can revoke access to the folder, or change access level.
  • Folder Manager – has full control over the folder and can make changes to the users and items in the folder.
  • Item Manager – has control over the items in the folder (view, add, edit, and delete).
  • Folder Member – can only use the items in the folder.
• ​​​​​​​The Logs section shows activities for this particular folder. Selecting the Activity Log link will open Directory Insights, with the Service dropdown pre-filtered to Password Manager, the shared folder pre-selected, and Time Range defaulted to Last 15 days.

Directory Insights

Admins can use the Directory Insights tool to monitor user events within Password Manager.

• Go to INSIGHTS > Directory, and select Password Manager in the Service dropdown menu.
• The following events are available:
  • Enable password manager for organization
  • Disable password manager for organization
  • Enable password manager for user
  • Disable password manager for user
  • User activates password manager
  • User deactivates password manager
  • User reactivates password manager
  • Create folder
  • Delete folder
  • Add member to folder
  • Update member in folder
  • Remove member from folder
  • Add item to a shared folder
  • Update an item in a shared folder
  • Remove an item from a shared folder
  • Move an item from a shared folder to another
  • Add group to folder
  • Delete group from folder
  • Edit group role in folder
  • Reveal item
  • Copy item
  • Autofill item
  • App updated
  • App paired
  • App unpaired
  • Delete user account
  • Automatic backup created
  • Restore from backup
  • Create manual backup
  • Export passwords
  • Change pincode
  • Change backup path

Location of Logs and Backup Files

• Password Manager Logs
  • Mac: ~/Library/Application Support/JumpCloud Password Manager/data/daemon/log
  • Windows: %appdata%\JumpCloud Password Manager\data\daemon\log\
  • Linux: ~/.config/JumpCloud Password Manager/data/daemon/log/
• Backup Files
  • Mac: ~/Library/Application Support/JumpCloud Password Manager/data/daemon/backups/<directory with 36-digit unique id>
  • Windows: %appdata%\JumpCloud Password Manager\data\daemon\backups\<directory with 36-digit unique id>
  • Linux: ~/.config/JumpCloud Password Manager/data/daemon/backups/<directory with 36-digit unique id>