Goal:<\/td> Upgrade directory services<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\nBackground<\/h2>\n\n\n\n As the System & Network Administrator at St. Thomas Academy, Paul McKeehan knows the challenges of IT in the education sector well.<\/p>\n\n\n\n
\u201cThere are so many things that students, teachers, and admins need to effectively do their job. For example, we have applications like G Suite for Education, Office 365, and PowerSchool, to name a few. We also have a mixed environment of Macs, Windows, and Linux servers, all of which struggled to communicate with our traditional on-prem directory service,\u201d McKeehan said.<\/p>\n\n\n\n
\u201cI kept running into projects that I wanted to implement, but was unable to manage with AD.\u201d<\/p><\/blockquote>\n\n\n\n
<\/figure><\/div>\n\n\n\nBut Paul McKeehan had an even more pressing problem: aging hardware. \u201cI have a 2003 AD server. I have 2008 DHCP and DNS servers. I also have an entire department of Windows machines that are about a year away from end of life,\u201d McKeehan said. \u201cI needed to upgrade all of that and maintain access level privileges across the different platforms. When you factor all of this and the Windows licenses we would need together, the price tag gets expensive.\u201d<\/p>\n\n\n\n
Searching for Solutions<\/h2>\n\n\n\n \u201cEven with discounts for education, I estimated that the upgrade costs would total $12,000. But that was just for the first two years,\u201d McKeehan said. \u201cYou also have to think about maintenance and annual license renewals. Then, five years later, you have to do it all over again.\u201d<\/p>\n\n\n\n
“Budgetary constraints became a huge hurdle.”<\/p><\/blockquote>\n\n\n\n
McKeehan\u2019s first thought was to replace AD with OpenLDAP, but he quickly found that he was running into the same issues he had found with AD. \u201cEventually, I realized the on-prem approach wouldn\u2019t be able to solve most of my mixed environment woes.\u201d<\/p>\n\n\n\n
<\/figure><\/div>\n\n\n\nMcKeehan\u2019s next thought was to try Google Cloud Identity, but was again disappointed to find that it was limited to Google services. \u201cSo I started to think, \u2018Maybe there is a holistic cloud-based directory service available.\u2019\u201d<\/p>\n\n\n\n
\u201cI literally Googled, \u2018Directory-as-a-Service,\u2019 and JumpCloud was the top result. After some digging, I quickly realized JumpCloud could easily mitigate the challenges I was facing.<\/p>\n\n\n\n
JumpCloud in Action<\/h2>\n\n\n\n McKeehan only recently made the leap to JumpCloud, but he\u2019s already using it to manage systems (Windows, Mac, Linux), web applications (Office 365, G Suite), on-prem resources (PowerSchool), and even STA\u2019s WiFi network.<\/p>\n\n\n\n
<\/figure><\/div>\n\n\n\nMcKeehan walked us through each component of the implementation:<\/p>\n\n\n\n
Systems<\/h3>\n\n\n\n \u201cWe have the JumpCloud agent installed on all of our administrative devices. It\u2019s also installed in our computer labs and on servers,\u201d McKeehan said. \u201cThis makes management easy because instead of having to point all of these systems to an AD authentication server, we just install the JumpCloud agent on our systems, and then everyone can log in with their own unique credentials.\u201d<\/p>\n\n\n\n
Apps<\/h3>\n\n\n\n \u201cPrior to JumpCloud, onboarding and offboarding users was a very granular process. I would first have to go into Office 365 and create their account. Then I had to go into Google and create the same account there. Next would be going into AD or Open Directory to create their accounts there, and so on,\u201d McKeehan said.<\/p>\n\n\n\n
\u201cNow, all of those resources tie directly into JumpCloud Directory-as-a-Service\u00ae<\/sup>,\u201d McKeehan said. \u201cAll I have to do is set up their account in JumpCloud once, then provision all of their necessary resources by clicking a few checkboxes. Revoking access is as easy as disabling the checkbox. This saves me significant time per user.\u201d<\/p>\n\n\n\nPowerSchool<\/h3>\n\n\n\n \u201cWe use a few hosted apps here, but all of our learning management system (LMS) software still needs LDAP,\u201d McKeehan said. \u201cInstead of us having to import our Google directory into PowerSchool to create users, we can simply have PowerSchool look back to JumpCloud\u2019s LDAP-as-a-Service for user creation and authentication. There\u2019s no need for on-prem LDAP servers.\u201d<\/p>\n\n\n\n
Networks<\/h2>\n\n\n\n \u201cGetting RADIUS to work was a highlight for me personally,\u201d McKeehan said. \u201cJumpCloud\u2019s RADIUS-as-a-Service provides ease of access for students and faculty, while enabling us to secure WiFi via their personal username and password. Not only does it cut down on the management overhead from password resets and lockout, but it is also boosts network security by getting rid of the \u201cold-style\u201d pre-shared key SSID authentication. Plus, no on-site RADIUS servers.\u201d<\/p>\n\n\n\n
The Result<\/h2>\n\n\n\n JumpCloud has addressed the school\u2019s directory needs while coming in well below the $12,000+ they would have spent upgrading their AD infrastructure. But opting for a cloud-based directory service has also saved Paul McKeehan valuable time.<\/p>\n\n\n\n
“I can accomplish just about any task in a third of the time with JumpCloud.”<\/p><\/blockquote>\n\n\n\n
<\/figure><\/div>\n\n\n\n\u201cFor example, setting up a new faculty user account and provisioning access to all of their resources used to take me an hour or more,\u201d McKeehan told us. \u201cWith JumpCloud, I can reach the same result in twenty minutes or less.\u201d<\/p>\n\n\n\n
The ability to centralize resource management has been \u201chuge\u201d for Saint Thomas. McKeehan explained, \u201cJumpCloud empowers me to control all of my IT resources from one pane of glass rather than having to switch between multiple different sites and services to create user accounts manually.\u201d<\/p>\n\n\n\n
But the most important factor is the end user; no directory implementation could be a success unless it was a success for the students and faculty of STA.<\/p>\n\n\n\n
\u201cThe best part about my experience with JumpCloud has been that most of my users haven\u2019t even noticed the change,\u201d McKeehan said. \u201cThe implementation has gone so smoothly that it has been \u2018business as usual\u2019 for my users. There haven\u2019t been any issues or complaints. Everything just works.\u201d<\/p>\n\n\n\n
Conclusion<\/h2>\n\n\n\n Sys Admins in the education sector have the unique challenge of managing vast, mixed environments on a smaller budget.<\/p>\n\n\n\n
Faced with aging hardware, Paul McKeehan knew it was time to make the move to the cloud. Now that he\u2019s implemented Directory-as-a-Service, it\u2019s clear that he made the right decision for Saint Thomas Academy.<\/p>\n\n\n\n
\u201cJumpCloud has enabled me to effectively eliminate the upfront costs of upgrading on-prem infrastructure, not to mention maintaining it,\u201d McKeehan said.<\/p>\n\n\n\n
\u201cI just pay for what I use, and JumpCloud takes care of the rest.\u201d<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"
The Saint Thomas Academy (STA) is a private school whose ageing infrastructure started to present a problem. They found JumpCloud and the rest is history.<\/p>\n","protected":false},"author":70,"featured_media":3896,"template":"","categories":[42],"collection":[],"wheel_hubs":[],"platform":[],"resource_type":[2313],"funnel_stage":[],"coauthors":[],"acf":[],"yoast_head":"\n
Saint Thomas Academy Case Study: DaaS on a Budget - JumpCloud<\/title>\n \n \n \n \n \n \n \n \n \n \n \n\t \n\t \n\t \n \n \n\t \n\t \n\t \n