About

The JumpCloud integration brings the users, administrators and devices from your JumpCloud account into ControlMap. It helps you show an auditor who has access to your systems, whether each person is covered by multi-factor authentication (MFA), and whether each device has an owner. ControlMap collects the data on a schedule, so you don't have to export it by hand.

ControlMap collects:

• User accounts, including whether MFA is set up.
• JumpCloud administrators. An account counts as an administrator if its role name contains "Administrator".
• Devices, which become assets with their owner.

The integration runs these compliance checks:

• All user accounts in Jump Cloud are owned by employees / people
• All devices in Jumpcloud has a owner assigned
• All user accounts in Jump Cloud have MFA enabled
• All administrators in Jump Cloud have MFA enabled

Before you start

Have these two values from your JumpCloud account ready:

• Setting up integrations from the client portal is part of the Pro plan. For details, see the Free, Essentials and Pro plans article.
• API key
• Organization ID

Connect JumpCloud

1. Go to Monitor › Integrations and select Add Integration.
2. Search for Jump and select the Jump Cloud card. The card reads "Jump Cloud" with a space, so a search for "JumpCloud" does not find it. It is listed under Identity Providers.

3. On the Connection step, check the Connection Name. ControlMap fills in a name automatically, and you can change it.
4. Enter the JumpCloud Api Key. The key is hidden as you type.
5. Enter the JumpCloud Organization Id.
6. Select Next: Checks.

Complete the remaining steps as described in the Connect an integration article: Checks, Watchers and Schedule. JumpCloud has no Inclusions & Exclusions step.

What you'll see after connecting

After the first scan, JumpCloud's data appears in three places in Monitor:

• User Accounts: each JumpCloud user and administrator. The Integration column and filter tell your JumpCloud connection apart from your other connections.
• Assets: the JumpCloud devices, with their owner.
• Compliance Checks: the four JumpCloud checks. Each check shows No Data until the first scan has finished.

Disconnect or change settings

• To change the API key, Organization ID, schedule or watchers, open the connection from Monitor › Integrations and use its tabs, as described in the Connect an integration article.
• To remove JumpCloud, select the bin icon on its card in Monitor › Integrations and confirm. This also deletes the assets and their compliance status.