{"id":94764,"date":"2023-10-12T15:59:31","date_gmt":"2023-10-12T19:59:31","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=94764"},"modified":"2025-01-27T17:00:39","modified_gmt":"2025-01-27T22:00:39","slug":"get-started-self-service-account-provisioning","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/get-started-self-service-account-provisioning","title":{"rendered":"Provision New Users on Device Login"},"content":{"rendered":"\n
Self-Service Account Provisioning<\/strong> lets users bind their account to a JumpCloud-managed macOS or Windows device directly from the login window. This streamlines the onboarding experience for users and enables light-touch device configuration for admins. <\/p>\n\n\n\n When enabled, users see Sign in with JumpCloud <\/strong>at the device login window and enter their existing JumpCloud user credentials to begin the user-led provisioning process.<\/p>\n\n\n\n Sign in with JumpCloud<\/strong> is only present on devices that have no current JumpCloud user associations.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Understanding the Benefits<\/strong>:<\/p>\n\n\n\n Prerequisites:<\/strong><\/p>\n\n\n\n Considerations<\/strong><\/p>\n\n\n\n To enable Self-Service Account Provisioning for your org: <\/strong><\/p>\n\n\n\n Enabling Self-Service Account Provisioning deploys the updated login window to macOS devices. There are several benefits over the standard macOS login window:<\/p>\n\n\n\n When your admin enables the feature, the Sign in with JumpCloud<\/strong> button appears on your macOS or Windows device login window. The login process will differ slightly depending on the OS of your device. <\/p>\n\n\n\n To use Sign In with JumpCloud on a macOS device<\/strong>:<\/p>\n\n\n\n During account creation, user and device MFA requirements are ignored. After account creation, you’ll be prompted for MFA on next login if enforced by your admin. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n To use Sign In with JumpCloud on a Windows device:<\/strong><\/p>\n\n\n\n During account creation, user and device MFA requirements are ignored. Once the account is created, you will be prompted for MFA on next login if enforced by your admin. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n To disable Self-Service Account Provisioning for your org: <\/strong><\/p>\n\n\n\n Disabling Self-Service Account Provisioning will not remove any existing JumpCloud users on devices. You can manage user to device associations in the JumpCloud Admin Portal. See Bind Users to Devices<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n You can enable Self-Service Account Provisioning for macOS devices to take advantage of the updated login window. If JumpCloud users are already bound to devices via Admin action, the Sign in with JumpCloud button won’t appear. <\/p>\n<\/div><\/div><\/div>\n\n\n\n Yes, you can still associate users to devices via the Devices list in the Admin Portal. However, the Sign in with JumpCloud<\/strong> option will not be present on device login to add additional user accounts.<\/p>\n<\/div><\/div><\/div>\n\n\n\n No, only the creation of a new JumpCloud account on a device is supported. Device association will fail if the JumpCloud username matches an existing local account on the device.<\/p>\n<\/div><\/div><\/div>\n\n\n\n When users Sign in with JumpCloud on a device, MFA requirements are temporarily ignored for provisioning. Users will need to enroll in MFA in a JumpCloud User Portal browser session. See MFA for Users<\/a>.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<\/p><\/div>
\n
\n
\n
\n
\n
Enabling Self-Service Account Provisioning (Admin)<\/h2>\n\n\n\n
\n
\n
\n
<\/p><\/div>
\n
<\/figure><\/div>\n\n\n
Exploring the macOS Login Window<\/h2>\n\n\n\n
\n
<\/figure><\/div>\n\n\n
Using Self-Service Account Provisioning (User)<\/h2>\n\n\n\n
Signing in on a macOS Device <\/h3>\n\n\n\n
\n
<\/li>\n\n\n\n
<\/li>\n<\/ol>\n\n\n\n
<\/p><\/div>
\n
<\/li>\n\n\n\n
Signing in on a Windows Device<\/h3>\n\n\n\n
\n
<\/li>\n\n\n\n
<\/p><\/div>
\n
<\/li>\n<\/ol>\n\n\n\n
<\/p><\/div>
\n
\n
Disabling Self-Service Account Provisioning (Admin)<\/h2>\n\n\n\n
\n
\n
<\/p><\/div>
FAQ<\/h2>\n\n\n\n
Troubleshooting<\/h2>\n\n\n\n