{"id":64931,"date":"2022-07-01T11:00:00","date_gmt":"2022-07-01T15:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=64931"},"modified":"2024-12-20T14:17:32","modified_gmt":"2024-12-20T19:17:32","slug":"how-to-enable-mfa-on-macs","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/how-to-enable-mfa-on-macs","title":{"rendered":"Enabling MFA on Macs for MSPs "},"content":{"rendered":"\n

In today\u2019s business environment, passwords are not enough to keep our electronic world safe, and MSPs have to reckon with that fact. Even if your users have the best passwords on earth, the ubiquity of data breaches and phishing attacks make even the most advanced keys useless. <\/p>\n\n\n\n

You\u2019re likely already implementing additional security measures with your customers, like rolling out multi-factor authentication (MFA)<\/a> to protect the identities that hold the keys to your various kingdoms.

Requiring MFA to access web-based resources is commonplace, but protecting endpoints like laptops or desktops is not. MSPs focus heavily on preventing malicious software from attacking data with state-of-the-art monitoring and protection tools. But that same data can often be accessed by entering a password \u2013 and that password is likely to be less complex, since users have to enter it multiple times a day. <\/p>\n\n\n\n

For Windows laptops, many IT admins have turned to AzureAD for MFA, but Macs aren\u2019t typically candidates for this<\/a>. Fortunately, JumpCloud has made it easy for you to add MFA security for your Mac and Linux devices \u2013 in addition to Windows. <\/p>\n\n\n\n

Setting Up Mac MFA <\/h2>\n\n\n\n


1. Set up a JumpCloud account for each user and enable MFA<\/strong><\/p>\n\n\n\n

First, make sure that the Mac\u2019s user has a JumpCloud account set up. Then, ensure you\u2019ve selected \u201cRequire User MFA.” The user will be prompted to complete the MFA setup via their account\u2019s email. MFA with JumpCloud can be either push-approved via the JumpCloud Protect<\/a> <\/strong>mobile app, or TOTP<\/a> with your authenticator app of choice.<\/p>\n\n\n\n

\"screenshot<\/figure>\n\n\n\n

2. Configure the Mac device<\/strong><\/p>\n\n\n\n

Now that the user\u2019s account is ready you can configure the device. With JumpCloud, the only setup required on the device itself is the installation of our JumpCloud Agent<\/strong>. <\/p>\n\n\n\n

If your Mac is enrolled in MDM <\/a>with JumpCloud, this is incredibly easy and can be done before the Mac is even removed from its box. If this is a BYOD device or one that has not been purchased via Apple Business Manager<\/a> related channels, a simple download and install of the JumpCloud Agent<\/strong> locally on the device will do the trick.\u00a0<\/p>\n\n\n\n

3. Connect the user to their new device<\/strong> <\/p>\n\n\n\n

Once the agent is in place, simply assign the device to the user, and your job is done. When they go to login, they\u2019ll be prompted for their password and MFA.<\/p>\n\n\n\n

\"screenshot<\/figure>\n\n\n\n

With JumpCloud, you can achieve a level of security that exponentially reduces the risk of a customer data incident while also providing a richer support experience in a matter of minutes. <\/p>\n\n\n\n

Enabling JumpCloud also enables features like self-service password resets, which can dramatically<\/em> <\/strong>reduce ticket traffic, and SSO, which streamlines and hardens the user experience.<\/p>\n\n\n\n

Check out JumpCloud today and discover the many ways you can protect your MSP and the customers you serve! If you\u2019d like to learn more about MFA with JumpCloud for your devices, feel free to reach out to us<\/a>, or read some of our documentation below.<\/p>\n\n\n\n