- \n
- Log in to your JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- In the left navigation, click on Settings<\/strong>. <\/li>\n\n\n\n
- There are five tabs under Settings<\/strong> that you can click between. Some have their own menu of features on the right hand side. Click between the tabs and features you want to view and update. \n
- \n
- Organization Profile<\/a><\/li>\n\n\n\n
- Security<\/a><\/li>\n\n\n\n
- Administrators<\/a><\/li>\n\n\n\n
- Customize Email<\/a><\/li>\n\n\n\n
- Features<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Once you’re finished making updates in a given tab, click Save<\/strong>. <\/li>\n<\/ol>\n\n\n\n
Organization Profile<\/h2>\n\n\n\n
The Organization Profile<\/strong> houses general settings that your users will encounter. This is where you can find your Organization ID<\/strong>, or Customize Logo<\/strong> for the company. You can adjust User Portal settings like enabling read-only access for users, or change session timeout. You can also disable SSO with Google access, or Request to Delete<\/strong> the organization entirely. <\/p>\n\n\n\n
General<\/h3>\n\n\n\n
To name your Organization<\/strong>:<\/p>\n\n\n\n
- \n
- Under Settings<\/strong> > Organization Profile<\/strong> > General<\/strong> section, you can apply an Organization Name<\/strong>, Contact Name<\/strong> and Contact Email<\/strong>.\n
- \n
- Various emails will include a contact link to this contact name and email.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
<\/a>To access your Organization ID<\/strong>:<\/p>\n\n\n\n
- \n
- To view and\/or copy your Organization ID<\/strong>, click the \u2018eye\u2019 icon to display all characters.<\/li>\n\n\n\n
- Click the \u2018double page\u2019 icon to copy the ID.<\/li>\n<\/ol>\n\n\n\n
Customize Logo<\/h3>\n\n\n\n
- \n
- You can click Choose A File<\/strong>, or Upload or drag a file to add either a .png or .jpg with a transparent or white background. You can see what your logo will look like in Headers, Emails and Login from JumpCloud to your org\u2019s users under Preview Logo<\/strong>. <\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nLogos must meet a minimum resolution of 400px X 400px and have a max file size of 780 KB.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Click Save<\/strong> if these are your only changes.<\/li>\n<\/ol>\n\n\n\n
User Portal Settings<\/h3>\n\n\n\n
You can give your users read-only access in their User Portal, and\/or allow them to download the JumpCloud agent directly from their User Portal. <\/p>\n\n\n\n
- \n
- Select Enable read-only on the user portal\u2019s profile page for all users<\/strong> to limit their access. Clear the checkbox to disable this. <\/li>\n\n\n\n
- Select Allow all users to enroll devices through the User Portal<\/strong> so they can download the JumpCloud Agent directly from their User Portal. Clear the checkbox to disable this. See Enable Users to Install the Agent<\/a> to learn more. <\/li>\n\n\n\n
- Click Save<\/strong> if these are your only changes.<\/li>\n<\/ol>\n\n\n\n
<\/p><\/div>Note:<\/strong> \nYou can’t customize the URL of the User Portal.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
User Portal Session Duration<\/h3>\n\n\n\n
You can adjust the duration that the User Portal stays active before the session expires and the user is required to log in with their credentials again. This ensures that an idle device can’t be used by malicious parties to access sensitive data.<\/p>\n\n\n\n
<\/p><\/div>Note:<\/strong> \nThe default value for User Portal Session Timeout is 8 hours. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Considerations<\/strong>: <\/p>\n\n\n\n
- \n
- Activity is defined as interactions with the server, like launching apps (Identity Provider and Service Provider initiated) or updating user info. <\/li>\n\n\n\n
- Updates to the duration settings won\u2019t affect a user\u2019s current session but will apply the next time they log in. <\/li>\n\n\n\n
- The duration settings currently apply to all factors of authentication enabled for a user.<\/li>\n\n\n\n
- The duration settings apply only to the JumpCloud User Portal. In many cases, setting duration must be defined on the Service Provider side (ex: AWS, Slack etc).<\/li>\n\n\n\n
- When the browser session is terminated, the User Portal session will also be terminated. <\/li>\n<\/ul>\n\n\n\n
To set User Portal Session Duration:<\/strong><\/p>\n\n\n\n
- \n
- Set a User Portal Session Duration<\/strong> in Days<\/strong>, Hours<\/strong> or Minutes<\/strong> specifying how long you want the User Portal to stay active before going idle and prompting users for their login credentials. The minimum time you can set is one minute, and the maximum is 90 days. <\/li>\n\n\n\n
- Click Save<\/strong> if these are your only changes.<\/li>\n<\/ol>\n\n\n\n
<\/p><\/div>Note:<\/strong> \nThe default value for Admin Portal<\/strong> session timeout is 60 minutes. The session length is not configurable<\/strong>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Administrator Management<\/h3>\n\n\n\n
Administrators can have Single-Sign On (SSO) with Google enabled in their Admin Portal so they save time by using one set of credentials to access their Admin Portal.<\/p>\n\n\n\n
To enable SSO with Google for Admins<\/strong>:<\/p>\n\n\n\n
- \n
- Select Disable SSO with Google on Admin Portal<\/strong> to remove the ability for admins to access their Admin Portal through one set of credentials. Leave it cleared if you want them to be able to log in with one set of credentials. <\/li>\n\n\n\n
- Click Save<\/strong> if these are your only changes.<\/li>\n<\/ol>\n\n\n\n
To disable SSO with Google for Admins, see Disable Google SSO in the Admin Portal<\/a> to learn more.<\/p>\n\n\n\n
<\/p><\/div>Note:<\/strong> \nEach Admin will need to connect their Google account to be able to log in to JumpCloud with Google.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
To connect your Google account<\/strong>:<\/p>\n\n\n\n
- \n
- From the Administrators<\/strong> tab, select the Admin you want to edit.<\/li>\n\n\n\n
- In the Edit Administrator<\/strong> panel, scroll to Account Settings<\/strong>, then click Connect<\/strong>.
![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/edit-admin-connect-login-with-google.jpg\")
<\/li>\n\n\n\n- Follow the Google prompts to connect your account.
![\"\"](\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/connect-login-with-google.jpg\")
<\/li>\n\n\n\n- When your account is connected, click Sign in with Google<\/strong> on the JumpCloud Administrator login screen to sign in using your Google credentials.
<\/li>\n<\/ol>\n\n\n\nDelete the Organization<\/h3>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\")
<\/p><\/div>Warning:<\/strong> \nOrg deletions are fully destructive and non-recoverable. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
To delete the org<\/strong>:<\/p>\n\n\n\n
- \n
- Click Request to Delete<\/strong> to submit a deactivation ticket. You will be prompted to Enter Org ID to confirm<\/strong> the deletion request.\n
- \n
- Note<\/strong>: Support will reach out to you to confirm the account details for the deletion. In the meantime, remove all users and devices from this organization. See Delete an Organization<\/a> to learn more.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Click Request to Delete<\/strong>.<\/li>\n<\/ol>\n\n\n\n
Security<\/h2>\n\n\n\n
For password settings, see Manage Password and Security Settings<\/a> to learn more.<\/p>\n\n\n\n
Admin Accounts<\/h3>\n\n\n\n
Select the option under Global MFA Requirement<\/strong> to require all Admins in the org to use Multi-Factor Authentication (MFA).<\/p>\n\n\n\n
<\/p><\/div>Note:<\/strong> \nThis setting is not available in Managed Service Provider (MSP) tenant orgs.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- When this setting is enabled, you can’t edit the Enable Multi Factor Authentication for Admin Login<\/strong> setting on the individual Admin level.<\/li>\n\n\n\n
- If this setting is enabled, and you later disable it, all individual Admins will still have MFA required, but the Enable Multi Factor Authentication for Admin Login<\/strong> setting is now editable on the individual Admin level. See Enable MFA for the Admin Portal<\/a> to learn more.<\/li>\n<\/ul>\n\n\n\n
Administrators<\/h2>\n\n\n\n
The Admin list shows you all the org’s admins, along with their details. From here, you can create new admins, edit existing ones, or request to delete an Admin. <\/p>\n\n\n\n
The columns in the list show the name and email of the Admin along with their Role, the status of their API key, whether or not they are required to log in with MFA or not, and whether they are enrolled in MFA or not. <\/p>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\")
<\/p><\/div>Tip:<\/strong> \nHover over the status of each API key to see what they mean. <\/p>\n\n\n\n
For example: There are 2 variants of the ENABLED status. One of them has a ‘key’ icon next to it, while the other version doesn’t. The one with the ‘key’ icon means the API key is enabled for this Admin, and they have generated a key. The one without the ‘key’ icon means the API key is enabled for this Admin, but they haven’t generated a key yet. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
To create a new Admin<\/strong>:<\/p>\n\n\n\n
- \n
- Under Settings<\/strong> > Administrators<\/strong>, click on the green ( +<\/strong> ). <\/li>\n\n\n\n
- Under Details<\/strong>, add a First Name<\/strong> & Last Name<\/strong> (not required), add an Administrator Email Address*<\/strong> (required). <\/li>\n\n\n\n
- Under Permissions<\/strong>, set the Role<\/strong> for the Admin. See Admin Portal Roles<\/a> to learn more.<\/li>\n\n\n\n
- API key access is disabled by default for all new Admins. Select Enable API access<\/strong> to allow the Admin to generate their own key. <\/li>\n\n\n\n
- Under Security<\/strong>, you can toggle Multi-factor Authentication Required<\/strong> on or off. \n
- Under Details<\/strong>, add a First Name<\/strong> & Last Name<\/strong> (not required), add an Administrator Email Address*<\/strong> (required). <\/li>\n\n\n\n
- If this setting is enabled, and you later disable it, all individual Admins will still have MFA required, but the Enable Multi Factor Authentication for Admin Login<\/strong> setting is now editable on the individual Admin level. See Enable MFA for the Admin Portal<\/a> to learn more.<\/li>\n<\/ul>\n\n\n\n
- Click Request to Delete<\/strong>.<\/li>\n<\/ol>\n\n\n\n
- Note<\/strong>: Support will reach out to you to confirm the account details for the deletion. In the meantime, remove all users and devices from this organization. See Delete an Organization<\/a> to learn more.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- In the Edit Administrator<\/strong> panel, scroll to Account Settings<\/strong>, then click Connect<\/strong>.
- Click Save<\/strong> if these are your only changes.<\/li>\n<\/ol>\n\n\n\n
- Click Save<\/strong> if these are your only changes.<\/li>\n<\/ol>\n\n\n\n
- Set a User Portal Session Duration<\/strong> in Days<\/strong>, Hours<\/strong> or Minutes<\/strong> specifying how long you want the User Portal to stay active before going idle and prompting users for their login credentials. The minimum time you can set is one minute, and the maximum is 90 days. <\/li>\n\n\n\n
- Select Allow all users to enroll devices through the User Portal<\/strong> so they can download the JumpCloud Agent directly from their User Portal. Clear the checkbox to disable this. See Enable Users to Install the Agent<\/a> to learn more. <\/li>\n\n\n\n
- Select Enable read-only on the user portal\u2019s profile page for all users<\/strong> to limit their access. Clear the checkbox to disable this. <\/li>\n\n\n\n
- Click Save<\/strong> if these are your only changes.<\/li>\n<\/ol>\n\n\n\n
- Click the \u2018double page\u2019 icon to copy the ID.<\/li>\n<\/ol>\n\n\n\n
- To view and\/or copy your Organization ID<\/strong>, click the \u2018eye\u2019 icon to display all characters.<\/li>\n\n\n\n
- Various emails will include a contact link to this contact name and email.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
- Security<\/a><\/li>\n\n\n\n
- In the left navigation, click on Settings<\/strong>. <\/li>\n\n\n\n