Overview of JumpCloud Admin<\/h2>\n\n\n\n
The JumpCloud Admin mobile app gives an IT admin or support technician the ability to troubleshoot and handle quick requests from their phone. These tasks include unlocking a user\u2019s account or resetting MFA.\u00a0<\/p>\n\n\n\n
Larger workflows will continue to be handled from the JumpCloud portal.<\/p>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"){kind=icon}
<\/p><\/div>
- \n
- The dashboard shows users with Account Locked Out or Expired Passwords.<\/li>\n\n\n\n
- The User screen shows all users<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Supported Functionality<\/h3>\n\n\n\n
- \n
- View status:\n
- \n
- Admins can view an organizations\u2019 users, and user states and statuses (locked out, suspended, and MFA).<\/li>\n\n\n\n
- Admins can view Settings to determine app version, terms and conditions, and opt out of usage and quality data collection.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- User lifecycle functions\n
- \n
- Admins can suspend and restore a user’s account.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Troubleshooting user lockouts\n
- \n
- Admins can unlock a user\u2019s account, reset a user\u2019s MFA (TOTP, Push, WebAuthn), and force a password change.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
Using the JumpCloud Admin Mobile App<\/h2>\n\n\n\n
- \n
- Open the JumpCloud Admin app on your mobile device.<\/li>\n\n\n\n
- Log in with your JumpCloud admin credentials.\n
- \n
- If TOTP MFA is required, you must input your TOTP code to authorize the JumpCloud Admin mobile app.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n
Use Cases<\/h2>\n\n\n\n
- \n
- Unlock a user’s account<\/li>\n\n\n\n
- Reset and re-enroll a user’s MFA<\/li>\n\n\n\n
- Remove a user’s MFA requirement <\/li>\n<\/ol>\n\n\n\n
Use Case 1: Unlock a User’s Account<\/h3>\n\n\n\n
Scenario<\/strong>: A user contacted the help desk because their JumpCloud account is locked. How do I unlock this user\u2019s account?<\/p>\n\n\n\n
- \n
- On your mobile device, open the JumpCloud Admin<\/strong> app.<\/li>\n\n\n\n
- Log in with your JumpCloud admin credentials.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
You can set up JumpCloud Admin to log in using Face ID (iOS) or Fingerprint (Android).<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Tap on Accounts Locked Out<\/strong> and select the user you want to unlock. <\/li>\n\n\n\n
- Scroll down to Directory Activities<\/strong> and review what triggered the lock. If you see suspicious behavior or patterns, investigate further.<\/li>\n\n\n\n
- If the account unlock request is legitimate, tap Unlock User Account<\/strong>. <\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
- \n
- Unlock User Account<\/strong> will reset the failed login counter for this user immediately.<\/li>\n\n\n\n
- If you set an automatic time-based security setting for locked accounts in your Security policy, such as requiring the user to wait 30 minutes before they can try to log in again, Unlock User Account will also bypass this setting.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Manually notify the user that their account is unlocked.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
There is not an automatic notification system to inform the user their account is unlocked.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Use Case 2: Reset a User’s MFA<\/h3>\n\n\n\n
Scenario<\/strong>: A user lost their mobile device, or upgraded their smartphone and forgot to re-register their MFA client, and now they can\u2019t log in to their JumpCloud Portal because they lost access to JumpCloud Protect, Google Authenticator, Duo, or a similar OTP app. How do I reset the user\u2019s MFA on their account so they can re-enroll MFA on next login?<\/p>\n\n\n\n
- \n
- On your mobile device, open the JumpCloud Admin<\/strong> app.<\/li>\n\n\n\n
- Log in with your JumpCloud admin credentials.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
You can set up JumpCloud Admin to log in using Face ID (iOS) or Fingerprint (Android).<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Tap on Total Users <\/strong>and select the appropriate user.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
If users have a lock icon next to their name, it means the user has an MFA app configured.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Scroll down to Directory Activities<\/strong> and investigate to determine if there is any suspicious activity.<\/li>\n\n\n\n
- If there is no suspicious activity, tap Reset TOTP MFA<\/strong>.<\/li>\n\n\n\n
- Manually notify the user that their account is unlocked.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
There is not an automatic notification system to inform the user their account is unlocked.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Use Case 3: Remove a User’s MFA Requirement<\/h3>\n\n\n\n
Scenario<\/strong>: A user temporarily lost or misplaced their mobile device and can\u2019t access the JumpCloud Portal because they don\u2019t have access to JumpCloud Protect or a similar OTP app. How do I allow the user to sign in without MFA? <\/p>\n\n\n\n
- \n
- On your mobile device, open the JumpCloud Admin<\/strong> app.<\/li>\n\n\n\n
- Log in with your JumpCloud admin credentials.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
You can set up JumpCloud Admin to log in using Face ID (iOS) or Fingerprint (Android).<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Tap on Total Users <\/strong>and select the appropriate user.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
If users have a lock icon next to their name, it means the user has an MFA app configured. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Scroll down to Directory Activities<\/strong> and investigate to determine if there is any suspicious activity.<\/li>\n\n\n\n
- If there is no suspicious activity, tap Remove MFA Requirement<\/strong>.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
ou can remove a user\u2019s MFA requirement from the JumpCloud Admin mobile app, but you cannot re-enable MFA from the mobile app. To re-enable a user\u2019s MFA, you must use the JumpCloud Admin Console.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Manually notify the user that you removed their MFA login requirement.<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
When the user regains access to their mobile device, you must re-enable their MFA. For more information, see JumpCloud MFA Guide<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- Manually notify the user that you removed their MFA login requirement.<\/li>\n<\/ol>\n\n\n\n
- Tap on Total Users <\/strong>and select the appropriate user.<\/li>\n<\/ol>\n\n\n\n
- Tap on Total Users <\/strong>and select the appropriate user.<\/li>\n<\/ol>\n\n\n\n
- Manually notify the user that their account is unlocked.<\/li>\n<\/ol>\n\n\n\n
- If TOTP MFA is required, you must input your TOTP code to authorize the JumpCloud Admin mobile app.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n
- Admins can unlock a user\u2019s account, reset a user\u2019s MFA (TOTP, Push, WebAuthn), and force a password change.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
- View status:\n