{"id":88668,"date":"2023-06-05T13:09:39","date_gmt":"2023-06-05T17:09:39","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=88668"},"modified":"2024-03-15T12:39:52","modified_gmt":"2024-03-15T16:39:52","slug":"password-takeover-with-external-directories","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories","title":{"rendered":"Manage Passwords in External Directories from JumpCloud (Password Takeover)"},"content":{"rendered":"\n<p>When you bind users to external directories like Google Workspace and Microsoft 365 (M365)\/Entra ID, JumpCloud starts to manage their identities in those directories. When a bound user sets up their JumpCloud password, and logs in to their User Portal, JumpCloud takes over management of the password in the external directory as well. We call this password takeover.  The password is synchronized for those users any time they log in to the User Portal after a change has been made to their user record. This helps centralize identity and provides consistent, predictable password management within JumpCloud, for both Administrators and Users. \u00a0<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>Password synchronization will be logged by the external directory as a password update. The User might be logged out of their existing Google Workspace or M365\/Entra ID sessions and will receive a notification of a password update. A corresponding log in event can be found in JumpCloud to verify that the password up date was a synchronization with JumpCloud.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>Considerations<\/strong>:<\/p>\n\n\n\n<ul>\n<li>External directory passwords aren\u2019t sent and managed by JumpCloud until users log in to their JumpCloud User Portal for the first time after they\u2019re associated with a directory.<\/li>\n\n\n\n<li>Remind your users that if they want to change their password, they should do so through their JumpCloud User Portal.\n<ul>\n<li>If a User changes their password in an external directory, it won\u2019t be automatically updated in JumpCloud until the next time the User logs into their User Portal.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>JumpCloud previously required that a user reset their password in JumpCloud to complete synchronization with your external directory. If you had users who didn\u2019t complete that step, their password will be synchronized the next time they logged in to JumpCloud.\n<ul>\n<li>As a result of this password update, the user might be logged out of existing Google Workspace or M365\/Entra ID sessions and get notified of a password update.&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>M365\/Entra ID treats a password sync as a password reset regardless of whether or not the password changed. When a user\u2019s attributes are changed in JumpCloud, the next time that user logs in to the JumpCloud User Portal, a synchronization occurs with M365\/Entra ID.\n<ul>\n<li>The synchronization includes the user\u2019s password, which triggers reset password and refresh token update events in M365\/Entra ID, even if the user\u2019s password didn\u2019t change. A Microsoft password reset typically logs users out of their locally installed Microsoft applications, like Teams and Outlook, both desktop and mobile.&nbsp;<\/li>\n\n\n\n<li>If your organization has automation that regularly updates user attributes, users may be logged out of these applications more frequently.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Leverage&nbsp;JumpCloud\u2019s <a href=\"#bookmarking\">Bookmarking<\/a> feature&nbsp;to make your users&#8217; experience more streamlined from their user portal.&nbsp;<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>The flow differs slightly for active and new users.&nbsp;<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Flow for Active Users<\/h2>\n\n\n\n<p>An active user is a user in an &#8216;active&#8217; user state, has a password, and that password status is &#8216;active&#8217;. After an administrator binds an active user to an external directory, the user receives an email telling them the directory they\u2019ve been added to, and to set their password by logging into their JumpCloud User Portal.&nbsp;Once they\u2019ve done this, JumpCloud will manage their password for that external directory.&nbsp;<\/p>\n\n\n\n<p>When the User logs in to the JumpCloud User portal, a notification will indicate that their password was updated.<\/p>\n\n\n\n<p>In the external directory, the password will be updated, resulting in the user being logged out of existing Google Workspace or M365\/Entra ID sessions. Users will receive a notification from Google Workspace or M365\/Entra ID that their password has been updated.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Users That are Bound to More Than One External Directory<\/h3>\n\n\n\n<p>Users will receive a new email for each individual external directory that they are bound to. The flow for users bound to more than one external directory is the same as for active users.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Flow for New Users<\/h2>\n\n\n\n<p>A new user is a user in an &#8216;active&#8217; user state with a password status of &#8216;password pending&#8217;. After an administrator binds a new user without a password to an external directory, the user receives a Welcome to JumpCloud (activation) email that takes them through how to set up their new account.&nbsp;After the user sets up their account, creates an account password, and logs in to their User Portal, their password is sent to the external directories they\u2019re bound to. Now, JumpCloud will manage all passwords for external directories that User is bound to.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When you bind users to external directories like Google Workspace and Microsoft 365 (M365)\/Entra ID, JumpCloud starts to manage their [&hellip;]<\/p>\n","protected":false},"author":206,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2855,2954,3004,2850],"support_tag":[],"coauthors":[2842],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Manage Passwords in External Directories from JumpCloud<\/title>\n<meta name=\"description\" content=\"Explore how password takeover works with external directories like Google Workspace, M365, and Entra ID.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Manage Passwords in External Directories from JumpCloud (Password Takeover)\" \/>\n<meta property=\"og:description\" content=\"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-15T16:39:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"pamkellman\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories\",\"url\":\"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories\",\"name\":\"Manage Passwords in External Directories from JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:09:39+00:00\",\"dateModified\":\"2024-03-15T16:39:52+00:00\",\"description\":\"Explore how password takeover works with external directories like Google Workspace, M365, and Entra ID.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Manage Passwords in External Directories from JumpCloud (Password Takeover)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Manage Passwords in External Directories from JumpCloud","description":"Explore how password takeover works with external directories like Google Workspace, M365, and Entra ID.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories","og_locale":"en_US","og_type":"article","og_title":"Manage Passwords in External Directories from JumpCloud (Password Takeover)","og_description":"Browse the JumpCloud Help Center by category, search for a specific topic, or check out our featured articles.","og_url":"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories","og_site_name":"JumpCloud","article_modified_time":"2024-03-15T16:39:52+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes","Written by":"pamkellman"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories","url":"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories","name":"Manage Passwords in External Directories from JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:09:39+00:00","dateModified":"2024-03-15T16:39:52+00:00","description":"Explore how password takeover works with external directories like Google Workspace, M365, and Entra ID.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/password-takeover-with-external-directories#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Manage Passwords in External Directories from JumpCloud (Password Takeover)"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/88668"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/206"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/88668\/revisions"}],"predecessor-version":[{"id":106956,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/88668\/revisions\/106956"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=88668"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=88668"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=88668"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=88668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}