JumpCloud

Cloud based, no on-prem hardware required.

Great for small businesses and trials - first 10 users are free.

Centralized password management, MFA, device polices, and LDAP.

Free training and new/free certification available until the end of 2020.

I haven’t found anything I’ve disliked yet.

Certification compliance requirements - centralized management, password complexity, login banners, blocking usb storage devices, etc.

The way it can integrate different softwares at one place and the way user can sign into all the integrated application from single place and also its core ability to save passwords

Nothing to share at the moment, because we did not observe any issues using it so far

If you want to make things hassle-free for your employees, then please do consider it. It's not going to upset you!

- Saving password

- Multifactor authentication

- We now access things from single place

JumpCloud provides a suite of tools and directory services to provide great remote support to our endpoints of every OS in our infrastructure from one pane of glass. Device and user policy management works well and although there is still a lot of room to improve, the core suite of tools is head and shoulders above the competition while still being competitively priced.

They have basic offerings to span most of what I need to manage Mac, Windows, and Linux endpoints. MDM works great on Mac. Running commands remotely on endpoints is a little clunky but it works pretty well. Policy management works great. And they have other tools like an SSO portal for my end-users that generally works really well (although their documentation for configuring individual integrations needs a little TLC).

Lastly, premium support is a game changer. Because JumpCloud can be rather nuanced for some use-cases, you'll want to leverage their premium support. It's worth every penny though. The team is great.

I can't queue commands I push remotely to machines. If the machine isn't connected to the console at the time of the command, it won't receive the command...period. So I have to, as an admin, chase down machines that weren't on at the time I pushed an update or ran a command.

And if I want to be able to easily tell who got the update and who didn't, or ask other simple questions, JumpCloud lacks basic reporting functionality from any kind of GUI (they have a "dashboard" with a few canned pieces of info but it's not really helpful). If you like powershell, you'll get by, but if you prefer bash... prepare to learn powershell if you want to answer simple questions like "which machines have this software running on them?" or "what are all my machine hostnames and serials in alphabetical order?"

Mac MDM doesn't provide full Zero Touch DEP yet, although they do have a basic DEP program with Apple. JumpCloud doesn't have MDM capabilities for Windows yet.

Their Linux support exists but is highly nuanced (but its Linux so that's to be expected a little bit). Hard drive encryption, for example, which is managed for Windows and Mac, presents particular challenges on Linux, because as JumpCloud manages the password to access the endpoint but can't communicate the password change to the Linux hard drive encryption, the machine user has to change the password locally first prior to changing the associated JumpCloud password so the encryption "get's the memo" prior to the change.

There are many nuances like that throughout JumpCloud but all in all, they're putting money and resources into developing their feature-set based on customer feedback so I'm confident that many of these issues or features that are lacking will be addressed. It'll just be a matter of time for many of them.

We needed to solve three main problems:

1 - Remove local admin rights while still having the ability to manage the machines

2 - Set password policy (expiration, complexity, length)

3 - Manage hard drive encryption from a central location for Mac and Windows

We've found JumpCloud has a rich suite of tools that we've been able to use to address lots of other issues as well like remotely installing software, remote locking/wiping machines (MDM), remote password resets (when users forget their passwords or lock themselves out of their account).

The biggest thing was that JumpCloud gave us the ability to remotely see and manage our endpoints and the users logging onto them. And all done from the cloud so I don't have to worry about hardware.

The ease of use, AD Migration toolkit, and support are bar none. It's easy to use, just works, and provides functionality beyond AD that is perfect for the modern remote work environment.

The only dislike is the lack of features. Adding in tools for remoting into your devices and more GPO type features would be great. I'm sure all of these "dislikes" are future features.

If you're looking for a worthy replacement of traditional AD and movement to the modern workforce, this is for you. You will love it.

Ability to push software, policy, and provide businesses AD and password security whether they're on or off the companies internal network.

We have a few users that log into multiple different Mac's and their password was always different. We use JumpCloud SSO to solve this issue. We also added MFA to our MacOS logins!

When your password changes, it can cause some funk with MacOS KeyChain.

SSO and MFA to MacOS signin.