JumpCloud Directory Platform

Jumpcloud as our primary directory

製品を使ってみた感想： Overall Jumpcloud has been a great way to integrate cloud and operating system logins for our company

良いポイント:

broad support for many platforms as well as many login languages and operating systems

改善してほしい点:

I feel like despite paying for the best customer service that we dont always get the most knowledgeable people supporting us

Holistic And Neutral Solution For IAM And Device Management

製品を使ってみた感想： JumpCloud is the only solution which can provide an authoritative directory, an IdP for SAML and device management combined in a single unified SaaS-based solution. The neutral approach by serving well established standards such as LDAP, SAML and RADIUS for AuthN/AuthZ and having the capability to managed identities (user and their devices) and credentials including SSH-keys on devices is a true differentiator to competitive solutions. On top, JumpCloud's agent for devices enables broad and versatile capabilities to deploy software, configure endpoints and even use this for remediation purposes. Recently, extremely useful additional capabilities have further enabled the value of this solution. Broad insights about systems and the directory itself, consumable via UI and API's, not only helps IT admins in their daily operations, but also serves well for Information Security and GRC-related purposes such as auditing and compliance. Their API's have also enabled capabilities to better orchestrate and automate the on-/offboarding of users and their respective devices and gives good options to venture into ChatOps. New features related to MDM for macOS are now giving an opportunity to further simplify the overall management of the Apple-flee. Especially since macOS Big Sur, the stronger focus on MDM is another enabler.

良いポイント:

The most important benegit, as highlighted above, is that there is no reliance on any on-premise or self-hosted directory infrastructure. A cloud-native solutions such as JumpCloud allows to operate efficiently without being forced to configure, maintain, operate and secure a footprint-heavy stack.

改善してほしい点:

Until now, MFA is limited compared to other players in the field like Cisco Duo. More options, such as Push-MFA or even QR-codes to be used as multiple factors during authentication across devices and protocols, including LDAP/RADIUS, would further enable leaner footprints and higher efficiency.

Works well until it doesn't, then it'll take a long time to get right.

良いポイント:

Seamless, Platform agnostic SSO and User account management. Cloud LDAP Sync to MS and Google. Does what it says on the tin, Managing Admin and User access is a breeze as is tracking our company assets while working from home. Highly portable (our workforce all WFH as primary place of work since Covid).

改善してほしい点:

Mac installer is a bit temperamental. Console on mobile is not responsive. Clears saved payment details without warning. Customer Service takes ages (no international support outside US business hours), we had our account suspended and it took over 5 days to get access to our businesses IT SSO.

Fantastic solutions for disparate business structure

製品を使ってみた感想： Jumpcloud allows us to control our security stance by giving us assurance that when we suspend a user, they are suspended.

良いポイント:

I really love that this software allows us to take control over a wide variety of computers, provides a central IDP for LDAP and Radius and allows us to provision computers and users with ease.

改善してほしい点:

At this point, I think the only thing I am missing is the ability to control apps outside of DEP with Macs (like Chrome and Google Drive). Also linux app control.

Look out Microsoft AD...

製品を使ってみた感想： I was hired into my organization to bring on a directory platform and consolidate our IT practices among users and computers. I came from a microsoft active directory shop, but my new company was not interested in AD. That was a seemingly tall task, until I found JumpCloud. I thoroughly enjoy coming into work and using jumpcloud to build the next era of our IT practices and procedures. We are primarily focused on SSO at the moment, and that is proving to be very simple to configure. I am looking forward to getting devices managed with JC in the next coming months using their pre-defined policies, as well as their command runner feature and powershell module. JumpCloud will soon be a serious competitor to Microsoft's admin suite, and I am very happy to be on board.

良いポイント:

SSO integrations are incredibly easy to configure, no matter if you are using a prebuilt configuration or need to make a custom connector. Having SSO, LDAP, Radius, MFA in the same platform as device authentication and configuration policies is something I have not found outside of Microsoft AD and JumpCloud. There are remote management and monitoring tools out there that claim to do these things, but so far JumpCloud has proven to be incredibly simple. I am constantly amazed that my tests just work within the first few tries. I am used to Microsoft environments where testing gets very tedious and gives minimal feedback on how to make things work. JumpCloud supports MacBooks like a champion. If your office is heavily invested in MacBooks, and you are looking for an easy way to centrally manage authentication and hardening, JumpCloud is the tool for you. By far my favorite feature is "Submit an idea" right in the admin console. You get the sense that they really care about their admins and want to make a tool that is always getting better.

改善してほしい点:

1) No nested user groups! I feel this is essential for identity and access governance. 2) The device policies that they have available cover a lot of the base security hardening needs, but I am excited to see just how much of the various supported OS jumpcloud will eventually be able to tap into. I would love to see JC mirror Active Directory Group Policies as much as possible, and continue to get more configurations added for MacOS. 3) iOS and Android devices are not able to be managed by JumpCloud, but I have been told this is coming by the end of 2021/early 2022. 4) Only TOTP MFA is supported for the admin console, and after getting SSO set up on a lot of tools the pain of that is getting to me, but I know they are working on this feature as well. 5) I personally believe that a remote desktop tool would make JumpCloud the king of IT tools.