{"id":75691,"date":"2023-06-05T13:11:48","date_gmt":"2023-06-05T17:11:48","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=75691"},"modified":"2024-10-15T14:02:34","modified_gmt":"2024-10-15T18:02:34","slug":"set-a-global-policy","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/set-a-global-policy","title":{"rendered":"Set a Default Access Policy"},"content":{"rendered":"\n<p>Use Default Access Policies settings to determine how users access a resource when no conditional access policies apply to them. You can see the Default Access Policies statuses for each resource (User Portal, SSO Applications, and JumpCloud LDAP) from the Conditional Access Policies list:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"1024\" height=\"518\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view-1024x518.png\" alt=\"\" class=\"wp-image-110292\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view-1024x518.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view-300x152.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view-768x388.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view-1536x777.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view-2048x1035.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>Considerations<\/strong>:&nbsp;<\/p>\n\n\n\n<ul>\n<li>Conditional access policies override a Default Access Policy.&nbsp;<\/li>\n\n\n\n<li>For the User Portal, the Default Access Policy setting defaults to&nbsp;<strong>Require MFA based on user setting<\/strong>.\n<ul>\n<li>The <strong>Require Multi-factor Authentication on the User Portal<\/strong> option must be enabled individually in the User &gt; Details tab to require MFA for the User Portal.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>For SSO Applications, the Default Access Policy setting defaults to&nbsp;<strong>Allow authentication<\/strong>.<\/li>\n\n\n\n<li>For JumpCloud LDAP, the Default Access Policy setting defaults to&nbsp;<strong>Allow Authentication<\/strong>.<\/li>\n\n\n\n<li>If you want to create a Default Access Policy that denies access, we recommend that you create it after you\u2019ve configured your conditional access policies that allow access. If you first create a Default Access Policy that denies access and there are no conditional access policies that apply to users, the Default Access Policy will apply to all of your users, and they won&#8217;t be able to access the User Portal or their SSO applications.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-configuring-a-default-access-policy\">Configuring a Default Access Policy<\/h2>\n\n\n\n<p><strong>To set up a Default Access Policy<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to<strong>&nbsp;SECURITY MANAGEMENT<\/strong>&nbsp;&gt;&nbsp;<strong>Conditional Policies<\/strong>.<\/li>\n\n\n\n<li>Click the&nbsp;<strong>Settings<\/strong> (gear)&nbsp;icon in the top right.<\/li>\n\n\n\n<li>Expand&nbsp;<strong>Default Access Policy Settings<\/strong>.<\/li>\n\n\n\n<li>For a resource, decide what happens when users aren\u2019t part of a conditional access policy:\n<ul>\n<li>If you don\u2019t want to require Multi-factor Authentication (MFA), select&nbsp;<strong>Allow authentication<\/strong>.<\/li>\n\n\n\n<li>If you want to require MFA, select&nbsp;<strong>Allow authentication &amp; require MFA<\/strong>.&nbsp;<\/li>\n\n\n\n<li>If you want to deny access, select&nbsp;<strong>Deny access<\/strong>.&nbsp;<\/li>\n\n\n\n<li>For the User Portal only, if you want the&nbsp;<strong>Require MFA&nbsp;<\/strong>setting in the User &gt; Details tab to determine how a user accesses a resource, select<strong>&nbsp;Require MFA based on user setting<\/strong>. To find and configure this setting, see <a href=\"#requiring-mfa-factor-types-from-user-details\">Requiring MFA Factor Types from User Details<\/a>.\n<ul>\n<li>When&nbsp;<strong>Require Multi-factor Authentication on the User Portal<\/strong>&nbsp;is selected on the User &gt; Details tab, users are required to authenticate with MFA when no conditional access policies apply to them.&nbsp;<\/li>\n\n\n\n<li>When&nbsp;<strong>Require Multi-factor Authentication on the User Portal<\/strong>&nbsp;isn\u2019t selected on the User &gt; Details tab, users aren\u2019t required to authenticate with MFA when no conditional access policies apply to them.&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Click&nbsp;<strong>save<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-requiring-mfa-factor-types-from-user-details\">Requiring MFA Factor Types from User Details<\/h2>\n\n\n\n<p>For a Default Access Policy, you have the option to select<strong>&nbsp;Require MFA based on user setting.&nbsp;<\/strong>This lets the&nbsp;<strong>Require Multi-factor Authentication on the User Portal<\/strong>&nbsp;setting on the User &gt; Details tab take effect when no conditional access policies apply to a user.&nbsp;<\/p>\n\n\n\n<p><strong>To configure the Require MFA setting from a User &gt; Details tab<\/strong>:&nbsp;<\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.&nbsp;<\/li>\n\n\n\n<li>Edit a user or create a new user in the Admin Portal. See&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/get-started-users\" target=\"_blank\" rel=\"noreferrer noopener\">Get Started: Users<\/a>.<\/li>\n\n\n\n<li>In the\u00a0<strong>User Security Settings and Permissions<\/strong>\u00a0section, select\u00a0<strong>Require Multi-factor Authentication on the User Portal<\/strong>\u00a0if you want users to authenticate with MFA when no policies apply to them.<br><img decoding=\"async\" width=\"2972\" height=\"1722\" class=\"wp-image-116430\" style=\"width: 1200px\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/mfa-user-portal-no-cap.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/mfa-user-portal-no-cap.png 2972w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/mfa-user-portal-no-cap-300x174.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/mfa-user-portal-no-cap-1024x593.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/mfa-user-portal-no-cap-768x445.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/mfa-user-portal-no-cap-1536x890.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/mfa-user-portal-no-cap-2048x1187.png 2048w\" sizes=\"(max-width: 2972px) 100vw, 2972px\" \/><\/li>\n\n\n\n<li>If you\u2019re using TOTP MFA, you can enter in a number for the enrollment period, but enrollment periods will only apply if no other policy applies and if the Default Access Policy is set to <strong>Require MFA based on user setting<\/strong>. Without the enrollment period, users who don\u2019t have MFA set up are required to enroll in MFA the next time they log in to the User Portal.&nbsp;<\/li>\n\n\n\n<li>Click&nbsp;<strong>save user<\/strong>.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Use Default Access Policies settings to determine how users access a resource when no conditional access policies apply to them. [&hellip;]<\/p>\n","protected":false},"author":204,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2911,2854],"support_tag":[],"coauthors":[2838],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Set a Default Access Policy - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to set a default access policy, which is used as the fallback when no conditional access policy applies.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/set-a-global-policy\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Set a Default Access Policy\" \/>\n<meta property=\"og:description\" content=\"Learn how to set a default access policy, which is used as the fallback when no conditional access policy applies.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/set-a-global-policy\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-10-15T18:02:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view-1024x518.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"jenniferklein\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/set-a-global-policy\",\"url\":\"https:\/\/jumpcloud.com\/support\/set-a-global-policy\",\"name\":\"Set a Default Access Policy - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/set-a-global-policy#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/set-a-global-policy#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view-1024x518.png\",\"datePublished\":\"2023-06-05T17:11:48+00:00\",\"dateModified\":\"2024-10-15T18:02:34+00:00\",\"description\":\"Learn how to set a default access policy, which is used as the fallback when no conditional access policy applies.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/set-a-global-policy#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/set-a-global-policy\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/set-a-global-policy#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view.png\",\"width\":1360,\"height\":1053,\"caption\":\"List of Conditional Access Policies in the JumpCloud Admin Portal.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/set-a-global-policy#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Set a Default Access Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Set a Default Access Policy - JumpCloud","description":"Learn how to set a default access policy, which is used as the fallback when no conditional access policy applies.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/set-a-global-policy","og_locale":"en_US","og_type":"article","og_title":"Set a Default Access Policy","og_description":"Learn how to set a default access policy, which is used as the fallback when no conditional access policy applies.","og_url":"https:\/\/jumpcloud.com\/support\/set-a-global-policy","og_site_name":"JumpCloud","article_modified_time":"2024-10-15T18:02:34+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view-1024x518.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"jenniferklein"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/set-a-global-policy","url":"https:\/\/jumpcloud.com\/support\/set-a-global-policy","name":"Set a Default Access Policy - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/set-a-global-policy#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/set-a-global-policy#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view-1024x518.png","datePublished":"2023-06-05T17:11:48+00:00","dateModified":"2024-10-15T18:02:34+00:00","description":"Learn how to set a default access policy, which is used as the fallback when no conditional access policy applies.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/set-a-global-policy#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/set-a-global-policy"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/set-a-global-policy#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/06\/cap-list-view.png","width":1360,"height":1053,"caption":"List of Conditional Access Policies in the JumpCloud Admin Portal."},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/set-a-global-policy#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Set a Default Access Policy"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75691"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/204"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75691\/revisions"}],"predecessor-version":[{"id":116431,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75691\/revisions\/116431"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=75691"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=75691"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=75691"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=75691"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}