HiThe recent (and not so recent) news about LastPass have been - at least to me - literally horrifying. I moved out of LastPass more than a decade ago (to be precise after their security incident on May 3, 2011) and started using 1password from then ...
It's been a minute since I posted about using JumpCloud Commands for security remediations. There's a particularly nasty zero day that's been actively exploited now that involves attackers obtaining an NTLM hash (Windows password) through Microsoft 3...
Hi everyone, I've been trying to implement Crowdstrike's SSO following the documentation that can be found in Crowdstrike's portal, and it somewhat-works. Here's what I mean:After following the steps, when clicking on the app, I get re-directed to Cr...
Last week I went to login as an Administrator account, only to find that my TOTP code was no longer working from my iOS Authenticator app. JumpCloud said the code was not valid. After a few login attempts, my admin account is now locked. Resetting th...
HelloSharing a documentation here to configure JumpCloud and Okta in tandem to use JumpCloud as factor for Device Trust by using OIDC, Conditional Access Policies and Okta's Policy Engine. What it does: If you're using Okta for SSO (let's say via SA...
Friday was supposed to be an easy day off where I spent some time to help a friend set up the Microsoft Azure features that he was paying for (but not using). His firm takes client data seriously and needed my help. It was content to maximize the Mic...
Hi all,I'm looking to set up 2FA for managed device login. Some users won't want to deal with any app installed on their devices and issuing stipend or company phone are out of the question. I've seen some similar questions but not sure if as time go...
My company recently deployed jumpcloud for our endpoints and I was wondering if anyone knew of a way through jumpcloud to give partial admin rights to my users. I do not want my users to reach out to me each time they need the admin password to add/...
Is there a way to configure a specific timeout length for a specific application's authentication session in Jumpcloud?
There is some way to set session Timeout only for certain logins? I.e. user1 need to do an activity all night long, but I don't want to grant an session on entire Jumpcloud env. Att,
HiJust to share my recent discoveries for Sentinel and Splunk as well as mentioning Datadog - as I find it noticeable in terms of integrations efforts and pricing.Azure Sentinel A publicly available Data Connector can be found on GitHub here. It's ju...
Patch Tuesday has become Zero Day Tuesday ... there are six actively exploited vulnerabilities this week alone. It's not always possible to wait for a patch, or a patch may not be sufficient (recall PrintNightmare, Follina, and MSDT). There was a pra...
So, I just configured SSO for YouTrack and it worked almost the first time. The hardest part was getting the SHA256 fingerprint of the JumpCloud certificate.I followed the instructions here (https://www.jetbrains.com/help/youtrack/cloud/saml-authent...
When I try to login as admin my OTP-code says; Verification code was invalid or already used.It does not work. If I try to reset my password I need also an OTP code. I'm locked out and have no clue how to solve this.
Hello Admins , How do you manage admin access rights in your organization. Since jumpcloud only offers choco package , how do you manage pushing software to employees? I am thinking to setup non admin user accounts so that we could improve security ,...
Yesterday, I was assembling some notes on the benefits of having Full Disk Encryption (FDE) being available across all Linux distros. I awoke to a high severity CVE concerning OpenSSL, which is generally used to secure communications on the (OSI) tra...
This video was very enlightening. A great deal of information about your infrastructure can be obtained from a single vulnerable user. The demo used tools that are bundled with Kali Linux. A must see for Windows admins...[video]
Just saw this post from Datadog that allows you to monitor your JumpCloud environment using Datadog. I never got around to setting this up, only did SSO. Does anyone else use this?Monitor Your JumpCloud Directory With Datadog | Datadog (datadoghq.com...
HeyA month ago, the Five Eyes Alliance issued a Joint Cybersecurity Advisory. The advisory highlights the following best practices to protect your systems: Control AccessHarden credentialsEstablish centralized log managementUse antivirus solutionsEmp...
An old colleague just told me:"we actually got audited by our cyber security insurance provider and they enforced us to have MFA on literally everything. Down to the switches. It was huge pain in the a**."Have any of you ever faced challenges related...
https://youattest.com/wp-content/uploads/2022/05/YouAttest-Integration-and-Reviewers-Guide-for-JumpCloud.pdf
Industry buzzword, or really necessary? Passwordless authentication is something that comes up a lot in the world of Identity and Access Management. We all have difference of opinion in "true" password less authentication. What does it mean to you? ...
A thread in an MSP Facebook group discussion that I read this morning surfaced a memory from a few years back. I served as an IT director at a manufacturing company, and it was my job to create a security program. One of the greatest lessons I learne...
Hello,I've been keeping an eye on Jumpcloud's progress and have been wanting to switch our small company over to it from Active Directory for quite some time now. The problem is that our company has multiple users jumping on and off each of our PCs t...
