JumpCloud Features

Process of providing credentials and logging into multiple systems is easy and intuitive for users

Supports required 3rd party Authentication Technologies. Example systems: bioMetric, passwords, key cards, token based systems, etc.

Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate. For example, something they know, Something they have or something they are.

Support SSO via Web agents, proxy agents, agent-less, SAML or oAuth and WS-Federation authentication and authorization Web services depending upon the application and business use case

Can serve as the identity provider to external service providers so that when the user logs into a service, instead of providing credentials to the service provider, the service provider trusts the identity provider to validate the credentials.

Can serve as the Service provider from an external service so that when the user logs in externally they have seamless SSO to internal applications from a service provider.

Provides ability to control access to PC's, Mobile devices, and other endpoint devices.

Controls access to legacy applications, web based applications, network resources and servers while employees are on the companies local area network.

Controls access to legacy applications, web based applications, networks resources while employees are outside the local area network.

Controls access to users that are not company employees that are either within the companies local area network or outside the network

Enables users to use their own device to access company applications.

Installation process is easy and flexible.

Options for resetting and enforcing password policies

Provides Administration tools/console that are easy to use and learn for routine maintenance tasks

Easily provisions new systems, platforms or applications using configuration and not customization.

Users can set, change passwords without interaction from IT staff

Standard and customized report creation to ensure appropriate access rights have been assigned

Provides mobile application that alerts administrators of potential issues and allows administrators manage access rights

Support for wide variety of cloud and on premise apps to automate provisioning for existing and new applications procured

Provides appropriate application interfaces to enable custom integrations for unique business requirements

Automates account/access rights creation, changes and removals for on-premise and cloud apps

Enables administrators to create access policies and applies policy controls throughout request and provisioning processes

Variety and Quality of integrations (ie Active Directory, LDAP)

Easily provisions new systems, platforms or applications using configuration and not customization.

Creates access requirements and standards and establishes user, roles, and access rights.

Automates provisioning and deprovisioning to reduce the amount of administrative manual work.

Reduces manual administrative work.

Manages identity information from on-premise and cloud applications.

Automatically allows access if users meet policy requirements.

Syncronizes passwords across company systems.

Provides a tool for IT administrators to manage the software.

Configure specific policies for users or groups using group policy objects.

Supports multiple password policies.

Provides screen sharing options to allow access to view or control real-time activities.

Provides easy and seamless file transfer and sharing capabilities to increase productivity and collaboration while working remotely.

Provides the ability to record remote access and support sessions.

Provides remote access to computers at any time, without an end-user present.

Supports Endpoint access control to multiple operating systems

Allows user authentication to be honored by all the hosts in two or more domains

Support access to browser based applications across required browser types

Provides required failover mechanisms to ensure if one server, network, etc fails users are still able able to authenticate

Contains pre-built and custom reporting tools to required to manage business

Provides mechanism for auditing authentication for trouble shooting purposes.

Can call and pass credentials to third party web services.

Users can request access to an application and be automatically provisioned if they meet policy requirements

Automates account/access rights creation, changes and removals for on-premise and cloud apps

Establish roles that create a set of authentication rights for each user in the role

Enables administrators to create access policies and applies policy controls throughout request and provisioning processes

Terminate access to multiple applications based on dates

Allow business stake-holders/managers to approve or reject requested changes to access via a defined workflow

Enables users to reset passwords without administrator interaction. Enforces password policies when resetting.

Change users and permissions in bulk

Keep identity attributes consistent across applications whether the change is made in the provisioning system or the application

Alerts administrators when inappropriate access occurs

Proactively audits access rights against policies

Supports differing operating systems and mobile devices

Supports Apple devices

Support Android devices

Centrally manages, configures, and oversees applications on employees' mobile devices

Separates work apps and data from personal apps and data

Offers visibility into employee mobile device activity

Provides administrative features to renew, track pricing, analyze terms, and outline expiration dates for SaaS contracts.

Allows companies to select a wide variety of applications to track and manage.

Presents information and analytics in a digestible, intuitive, and visually appealing way.

Registers employee-owned or company-distributed devices for IT access.

Configures devices to seamlessly work with business-required applications, WiFi, VPN, etc.

Ensures that employee devices are compliant with business regulations and requirements.

Offers visibility into employee device activity.

Separates personal data on devices from business-specific data.

Enable the remote locking down and encryption of employee mobile devices

Creates custom reports and alerts about security updates, existing or upcoming software licenses, data access, and more.

Remotely clears all data from compromised devices.

Implements encryption standards to secure data both in transit and at rest.

Provides compliance to multiple industry standards like HIPAA and GDPR.

Ensures that employees mobile devices are compliant with business regulations and requirements

Provides ability to track and/or map spending on all tools across departments with little to no manual entry.

Continuously tracks the number of licenses in use and how often they are being utilized. Tracks usage internally or through integrated applications.

Provides recommendations on how to improve your use of existing SaaS tools and recommendations on new SaaS tools

Ability to project spend based on contracts signed. Identifies redundant transactions and unnecessary costs.

Creates reports outlining application utilization, cost, user sentiment, and/or functional overlap.

Establish roles that create a set of authentication rights for each user in the role

Terminate access to multiple applications based on dates

Controls access to legacy applications, web based applications, networks resources while employees are outside the local area network.

Controls access to users that are not company employees that are either within the companies local area network or outside the network

Provides a single access point for users to access multiple cloud products without multiple logins.

Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate. For example, something they know, Something they have or something they are.

Supports required 3rd party Authentication Technologies. Example systems: bioMetric, passwords, key cards, token based systems, etc.

Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate.

Provides a single access point for users to access multiple cloud products without multiple logins.

Enables users to bring-your-own-device to access company applications.

Stores credentials and passwords in a secure vault. Eliminates hard-coded passwords. Hides passwords from users.

Ensures that credentials are centrally stored (in a secure vault) and when changed, that systems remain connected.

Allows privileges based on roles, such as business unit or other factors.

Configure which events will trigger a notification to prevent privileged access abuse in real-time.

Offers live session recording and playback for compliance and auditing purposes.

Offers the option to hide passwords when sharing with users, such as contract workers

Allows for temporary privileges for a defined task or period of time, to reduce the risk of credential abuse.

Intetgrates with Active Directory.

Integrates with Lightweight Directory Access Protocol (LDAP)-based directory services.

Simplifies or automates user provisioning, deprovisioning, and other user role changes.

Offers password management tools to end users.

Offers single sign-on functionalities to end users, allowing them to authenticate once and be given access to all of their company accounts.

Enforces user-access policies based on individual, role type, group membership or other factors to prevent unauthorized access to company systems and data.

Authenticates users prior to granting access to company systems.

Offers multi-factor authentication methods to verify a user's identity.

Supports diverse operating systems across several endpoint types.

Provides audit logs for compliance reasons.

Monitors, records, and logs both real-time and post-event activity.

Complies with the National Institute of Standards and Technology password best practice recommendations.

Creates a comprehnsive log of all activities when utilizing Privileged Access Management Software software.

Includes reporting functionality.

Provides an IAM solution for on-prem systems.

Provides an IAM solution for cloud-based systems.

Tracks user activities across protected systems.

Provides reporting functionality.

Log and report all modifications to user roles and access rights.

Provide standardized reports for regulatory compliance and audits.

Remotely wake, restart, and install applications on sleeping devices.

Print files from remote computer onto the local printer, without having to transfer the file between computers.

Connects instantly via group chats, web-based chats, offline messaging, persistent chat groups, and customer-initiated chat.

Provides support across iOS, Mac, Android, PC and other devices.

Allows cross-platform device support, supporting Windows, Mac, Linux, iOS, Android, and Chromebook devices.

Provides robust reporting capbilities like session details, technician performance information, and end users’ survey summaries.

Generates reports to demonstrate AI compliance with local and international frameworks.

Helps AI systems to comply with the regulations.

Maintains detailed logs of activities and changes to AI models.

Evaluates legal, operational and ethical risks posed by AI systems.

Monitors AI models for anomalies continuously.

Automates retraining, version updates and decomissioning when the models are outdated.

Restricts access to AI models and sensitive data to authorized users.

Helps sharing AI models and best practices.

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Works across multiple software systems or databases

Improves performance based on feedback and experience

Engages in human-like conversation for task delegation

Anticipates needs and offers suggestions without prompting

Makes informed choices based on available data and objectives

Engages in human-like conversation for task delegation

Grant access based on user attributes, location, device posture or risk.

Automate onboarding, offboarding, and access reviews throughout user lifecycles.

Enable users to reset passwords and update profiles without admin support.

Supports automated rotation and revocation of credentials or tokens for non-human identities.

Automates the creation of non-human identities (devices, bots, service accounts) according to policy.

Removes or disables non-human identities when they are no longer required or the workload is retired.

Enforces least-privilege access for non-human identities via granular permissions and scopes.

Supports authenticating non-human identities using tokens, certificates, or machine-native credentials rather than human-oriented logins.

Provides dynamic, context-based access for non-human identities (e.g., JIT elevation, temporal constraints).

Applies and enforces policies (e.g., least-privilege, separation-of-duties) specifically for non-human identities.

Logs and monitors all access and usage of non-human identities for forensic and compliance purposes.

Integrates non-human identity management with existing identity-access systems, DevOps pipelines, and cloud infrastructure.

Discovers, classifies, and maintains an inventory of all non-human identities across environments.