What do you like best about the product?

The ease of use for local authentication on non-domain machines using domain credentials. Building domain integration for all of our devices all around the country was near impossible, but here we can get the best of Active Directory (authentication) without needing custom software or unusual packages on Linux. It only took us a few minutes to get the AD integration installed on our domain controllers, and a lot of that was picking the utility user/password we'd use to authenticate the integration. Once we had the user setup, we were able to get it installed and users were live in the cloud instantly. There is also a very good agent for the end-client devices we're looking to integrate that allowed us to quickly deploy. After installation, it pulled down the configuration and began to set up the devices further to our desired state.

What do you dislike about the product?

They try to be a lot of things to a lot of people, but there isn't a good "basics" package just to get the authentication portion. We don't need an MDM and group policy interface. I also wish we could assign login permissions to AD groups instead of having to grant access to each person separately. I also dislike that the user account for integration is statically named and must be in the Users OU. Any groups that enable access to Jumpcloud also require you to create them in the Users OU, which makes it difficult to manage. We, like many companies, use OUs to hold our groups, our users, and our machines to make them easier to manage with Group Policy, and limiting us to this one means the security group cannot colocate with our other security groups in our main corporate OU. It would also be nice to have a way for existing AD user without needing a full refresh of their password in AD.

What problems is the product solving and how is that benefiting you?

We have a lot of Linux systems around the country that all need central authentication without custom or crazy software. All our other systems use Active Directory, so getting AD to work on Red Hat, CentOS, and Ubuntu in a repeatable format is next to impossible. This was three clicks and it's installed on a box forever. So easy! Now when a new employee starts in our systems department or our network engineering team, they gain access to the requisite infrastructure automatically based on their memberships in our Active Directory. That's not new, that's standard in AD; what's unique and different is the fact that this is now possible in even our cloud-based systems that live in Azure, Google, or AWS! We've also used it for our limited number of Mac users that now have AD integration without the headache of binding OS X to AD using the built-in tools. Password expiration, software deployment, and even some basic MDM for Mac all included as a part of the license.

Recommendations to others considering the product:

Make sure you follow instructions on AD integration and install the agent on every AD server. We missed one and it caused major issues until we were able to go back and properly set this up with each domain controller. It is very simple once you do it the right way, and even alerts you if the agent goes out-of-date because of new patches. Since we're a GPO shop for deployment, the silent installer makes it simple to deploy to our AD controllers and stage as a part of our regular monthly maintenance cycle.

What do you like best about the product?

As a Saas service provider, SSO and LDAP services are "Always On"
JC has always been very open to suggestions on features which makes sense.

The EDGE over normal AD enviroment is cross platform, JC works well with MacOS and Linux systems & a growing list system-wide policies for Windows and MacOS
The new System insights/Directory Insights brings Jumpcloud closer to SCCM and gives better visibility on whats on endpoints & Authentications for services

MDM is which is still in it's initial stage at the point of this review will bring jumpcloud to the next level.

What do you dislike about the product?

The admin console UI, simple and no roles (RBAC) defined to access. Any admin can do everything & if one goes rouge he/she can potentially delete everyone.
This will be still the achillies heel of JC until it can have roles like "Idenity admin" , "Helpdesk" , "Superadmin" with access to the logically related places similar to AD (where helpdesk can only unlock and reset password)

Overall reporting is still lacking, GUI take a while to display objects (user/endpoints/policies).
Where new features like Directory insights and System insights were introduced with csv export, foundation features still have not introduced this.

What problems is the product solving and how is that benefiting you?

Directory/LDAP sync between GUI frontend and backend DB at times take long to replicate for larger orgs.

Recommendations to others considering the product:

Fantastic Saas provider who is feature rich for any org size. Always open to suggestion mindset.
Think not just Cloud directory to replace AD, it's so much more.

What do you like best about the product?

Support right through the demo to the purchase, to the implementation. Success criteria are agreed between yourselves and them.
They're improving the product almost daily and have the ability to use web-hooks to monitor service status'
The ease in which you are able to integrate Gsuite (as well as multiple ways to import users from your existing central directory) It also gives you the ability to tailor the input for mass imports to limit the need to get users involved in this stage. The ability to simply submit Ideas to improve the UI. The communication from their design team and being involved in user testing so early on.
The resource and Knowledge base is extensive and easy to read - one of the best Ive used from a company in this space.
The interface is also simple to use and navigate through without being buried under complex sub menus
Straightforward email notifications from the system.
Being able to simply reimport users youve deleted without having to wait for a sync or overlapping the account when reimporting.

What do you dislike about the product?

A few tricky bits around JC > Gsuite integration wording that take some time to get your head around when integrating and activating accounts once imported.
The admin vs user console login is dynamic and handled via one URL making it a little frustrating to see what the user profile looks like as you have to log out/open a new window to log in as a user - they should be separate logins URLS/Pages or have dropdowns within the admin page in order to switch between. The lack of global settings to apply around Security means for both user login and System security - you have to apply MFA individually to users.
When removing/disabling users there isnt an ability to change what happens to their email account - they will be disabled/suspended immediately.
Not able to tailor the automated emails that come from the system to your users as it stands
Importing users via OUs inside Gsuite isnt possible (its everyone or needing to know user by user who to import (not the end of the world but worthwhile noting if you have more than 200 users + copious amounts of group emails)
Currently no ability to assign users to OUs from within JC to Gsuite.
We utilitise divisions and Departments as sub groups for organising our employees and use this hierarchy in another solution. Youre currently not able to nest groups so we had to flat out create ever department as top level inside the "system of users" section. Again a little niche for us, and shouldnt mark this awesome product down, but its worthwhile knowing even the smallest details.

What problems is the product solving and how is that benefiting you?

Centralised user and password management. Integrations to our many individual SaaS services and password standardising and complexity enforcement. Clearing out applications we're not needing as a business in the process. LDAP service also greatly benefits us by leveraging user provisioning when no other methods are available for important systems.
Right now 60%+ of our systems are simply book marked and have a word of mouth approach for what systems you need to access. So in doing this we're able to get existing and new employees aligned for their job and role success.

Recommendations to others considering the product:

When evaluating consider stakeholders technical requirements around this central management space. Discovery is key in making sure you have clear goals for this product as well as deciphering what you will need to evaluate in the product during the trial. This will help build a list of achievements this needs. You can then have clear goals and clear requirements.
Make sure we are comparing functionality around tasks which you thus outline as needing to do as An admin, an engineer, a compliance officer etc
Where not possible, simply ask the great staff or your AM/success manager at Jumpcloud and they will point you in the right direction.

What do you like best about the product?

I admire how JumpCloud keeps evolving and adding features, the team is always improving their product and I appreciate that.

What do you dislike about the product?

I haven't fully figured out an efficient way to remove duplicate entries from our console.

What problems is the product solving and how is that benefiting you?

Deploying across different OS platforms has been a key role that JumpCloud is filling, being able to manage role based access on OSX, Windows & Linux has been clutch.

Recommendations to others considering the product:

If you've got multiple endpoint types to manage, such as Apple Computers, Windows, & Linux, then looking at JumpCloud is a great idea. We've been using jumpcloud for the better part of 5 years now and it's simplified our management strategy. I believe they offer free trials for under twenty five users so you can spin it up in a lab to start. I came from an Active Directory background with 10 plus years experience so I'm thankful to have a solution like JumpCloud available to us.

What do you like best about the product?

Cloud based identity management and tools. Recent addition of password change functionality that applies the traditional windows methodology and doesn't require logging into a portal.

What do you dislike about the product?

Lack of integration options for iOS or Android. Limited to LDAP only which diminishes the number of product solutions that are available for integration. Many vendors limit integration to Active Directory only and have not implemented LDAP.

What problems is the product solving and how is that benefiting you?

Remote based identity management and machine configurations. Radius server functionality.

Recommendations to others considering the product:

If your looking for a cloud based identity LDAP service, then look no further.

What do you like best about the product?

Simple and intuitive to use. Supports all the important features required to do enterprise identity management. Integration with many services is simple with their prebuilt SAML connectors. The documentation is top notch and provides easy to follow examples on how to management configuration=.

What do you dislike about the product?

Some of the prebuilt SAML connectors could be more robust for instance, we would like to see a much more robust connector with AWS as we have multiple accounts and roles that we would like to be able to configure through a single connector rather than having to setup multiple endpoints. I think some parts of the product are still maturing such as user permission management at scale via the console however most customized controls are available via the API and some custom scripting. I think some more engagement from the Jumpcloud customer success team on how better we can utilize their product would be useful.

What problems is the product solving and how is that benefiting you?

More streamlined and secured onboarding and off-boarding of employees. More secure access management including server access with 2FA ssh key management. Taking a identity first approach and requiring all products and services integrate with the directory has enabled us to much more securely control access to our systems.

Recommendations to others considering the product:

Would recommend evaluating the product and seeing if it works well for you.

What do you like best about the product?

JumpCloud is current the only multi-platform DaaS product that works well. Their Directory product is mature, integrates well with other services through direct integrations or the Radius feature.

JumpCloud works best when it is the authoritative directory. You are able to bind Windows, Linux and macOS systems and synchronies the users password across your cloud and on-premise technology.

What do you dislike about the product?

Their product development strategy is un-focused and they seem to get distracted easily. Rather than focusing on fleshing out and developing features for their Directory product they add-on "features" like SAML/SSO and now VERY light weight MDM.

They need to focus on adding value to the Directory product through features like requiring a password change at next login, computer based authentication for RADIUS deployments and checking the users password against known bad/compromised passwords.

What problems is the product solving and how is that benefiting you?

As a cloud-first company JumpCloud solves the problem of needing an authoritative directory with no on-prem AD or LDAP. JumpCloud seamlessly connects endpoints, SaaS applications and RADIUS clients with a single password and the options for managing multi-factor auth.

What do you like best about the product?

I love the usability and features that JumpCloud provides its admins. It has great integration and permissions controls. The fact that I can add a policy to any machine and/or user is amazing and seamless. I would HIGHLY recommend more organizations take a look at JumpCloud for their AD.

What do you dislike about the product?

The customer support lacks in the response time and always provides links which are not helpful. I wish that they had a chat support feature for paying customers online. This would result in better troubleshooting and quicker resolutions to user issues.

What problems is the product solving and how is that benefiting you?

A lot of login and policy related issues, which have been helpful. My favorite aspect is the gmail integration. It is great not to have to go into the gsuite admin portal to add the user. JumpCloud does it directly for you with just the click of a radio button. VERY nice feature.

What do you like best about the product?

Cloud central administration, Cloud Radius, Cloud LDAP, Cloud Policies

What do you dislike about the product?

Cost, Some lacking of granular controls for policies

What problems is the product solving and how is that benefiting you?

Central auth and policies using cloud controls without servers and without intune

What do you like best about the product?

The initial concept of using Jumpcloud's DaaS sounded a bit unpredictable to us as that was our choice for cloud-based AD that we were introducing to our Org. But as we started to deep-dive into it's services more and more, we realised the great service and accessibility that it brought to the table.
Using Jumpcloud as a DaaS meant that we would no longer have the problem of users having password issues as we could remotely reset the same from our end.
We faced some initial issues with JC having to migrate all our softwares behind the SSO service from one platform to another. However, with the help of the tech support team and their engineering departments, it was resolved to satisfaction.
It's support for radius based authentication has meant that now users no longer need to worry about having issues with logging into different services by remembering multiple passwords or storing it in unsafe documents or browser services. Just bind the app behind it's 2FA based portal(meaning more secure) and users can easily access the webapp from the portal as needed.
Plus that could also be bound to our Radius based EAP for network access so employees can authenticate with the same secure method of access that they use for their computers.

The other main feature we like is the level of insight it gives into the systems management of our Hybrid windows+mac based environment. This was part of the reason why we chose JC because of the ability to integrate both Mac and Windows OS.
The prebuilt policies and systems grouping features and changing the settings/admin policies and permissions with just a few mouse clicks meant that we could have even new joiners in our company trained quickly on the services needed.
This also meant that if we needed to replace the system for the user we could easily have it shipped out to the user and

Jumpcloud also gives us a way to reconcile our asset and user management system as basically when a system is enrolled in JC the device some details are captured so that gives us a way to verify the asset inventory against. Similarly with users we can maintain control over the rights they have (granted it's not as complex as an actual Wintel based AD service) over the computer at a moments notice.

Coming down to the app itself, the agent is non-intrusive and barely has any impact over the performance of the PC.
However is quick to respond in realtime provided you have an active internet connection to the target devices to apply any changes in policy.


We've been using JC for over a year now and can happily say it has met the criteria we needed the services for and more.
With the recent addition of Apple MDM enrollment and (unconfirmed) possibility of adding windows MDM support as well we're getting more and more out of the service and look forward to a long partnership with them.

What do you dislike about the product?

As mentioned above, although they've recently added MDM based support I feel this should have been a part and parcel of their initial product itself.
The service support being divided into categories especially being tied to per user/month feels like a cheap move to get extra money out of the customers.
The service at its current level is not a replacement to any Wintel/MacOS Server environment.

What problems is the product solving and how is that benefiting you?

Mainly the End-user support has become much easier and so has the policy/process management for our systems.
Enrolling the devices in Apple MDM has made controlling machines for basic tasks a quick job(Restart/shutdown etc).
Installing script based applications has never been easier. just upload the batch/shell script along with any packages needed. set a schedule if needed(updates, periodic restarts etc)
System insights has granted us an extra layer of information which we could not have achieved previously.

Recommendations to others considering the product:

Consider the scope of support it offers NOW and the roadmap it has for the future.
It is extremely easy to train people with basic knowledge of AD services to get ready for JumpCloud administration.
The support team is extremely helpful and knowledgeable. Their knowledge-base is extensive and multiple webinars/newsletters keep you updated on the upcoming changes or addition of new features.
The MDM based support that has now been implemented definitely puts it in the right path.
Keep a list of tasks and service criteria that you need it to fulfil like endpoint management, user management etc.
Know that it cannot fully control or micromanage the user-specific permission like an org-unit would do in an actual AD environment as it can only either create a user as an admin or sudo or one without it.
Some software integrations may not be supported or may require custom SAML integration so it would be good to know before hand if your required applications(on-prem or cloudbased apps can be integrated with it or if there are any flaws/gaps/additional requirements for the same.