HelloSharing a documentation here to configure JumpCloud and Okta in tandem to use JumpCloud as factor for Device Trust by using OIDC, Conditional Access Policies and Okta's Policy Engine. What it does: If you're using Okta for SSO (let's say via SA...
Configuring a Tailscale SSO connection is pretty straightforward but there are a couple of gotchas to watch out for. First, neither JumpCloud nor Tailscale consider each other a primary vendor so you have to use custom connections. Second, Tailscal...
Just wanted to jot a few notes down for integrating SSO with Redox Engine.Steps:Create the SSO app in JC and accept the defaultsCheck the "Declare Redirect Endpoint" option - Redox requires thisACS URL: https://auth.redoxengine.com/saml2/idpresponseC...
We just upgraded our Bitwarden account to allow SSO integration and I'm having a bit of a tough time with it. There are some docs for the SCIM integration with Bitwarden there is nothing for SAML. JumpCloud has a "Bitwarden" SAML template so I thou...
John Hammond, of Huntress fame, published a video detailing how it's possible to recover, decrypt and reveal passwords from Chrome. The attack vector will also work for Firefox. It requires access to an endpoint, so don't be too alarmed when you read...
Prerequisites JumpCloud MDMOkta MFA packageOkta identity Engine Motivation There are several ways to enhance the security level of Okta SSO access. This article presents enabling Device Trust (devices must be managed) as an additional authentication...
We use SentinelOne EDR and I just found out that we have XDR data ingestion with our plan, but are not using. We can send pretty much any types of logs (so they say ...) to the XDR. Has anyone been sending their JumpCloud logs to SentinelOne XDR? ...
Hi Community FolksYesterday I wrote about: "How to establish Device Trust for Android Devices with Okta by using JumpCloud's Android EMM?"Now you might wonder: Can I do the same for iOS-devices as well? Yes, certainly you can. Please refer to the art...
HelloRecently I posted about "How to establish Device Trust (managed devices) for Okta by using JumpCloud as factor for authentication?" - which enables you to make use of Device Trust Certificates from JumpCloud with Okta. But how about mobile devic...
Zero trust as a strategy is essentially to trust nothing, verify everything. A colleague and I had an interesting chat the other day where we examined how that concept applies to the intersection of device management and identity. I created a decisio...
HiThe recent (and not so recent) news about LastPass have been - at least to me - literally horrifying. I moved out of LastPass more than a decade ago (to be precise after their security incident on May 3, 2011) and started using 1password from then ...
It's been a minute since I posted about using JumpCloud Commands for security remediations. There's a particularly nasty zero day that's been actively exploited now that involves attackers obtaining an NTLM hash (Windows password) through Microsoft 3...
Hi everyone, I've been trying to implement Crowdstrike's SSO following the documentation that can be found in Crowdstrike's portal, and it somewhat-works. Here's what I mean:After following the steps, when clicking on the app, I get re-directed to Cr...
Last week I went to login as an Administrator account, only to find that my TOTP code was no longer working from my iOS Authenticator app. JumpCloud said the code was not valid. After a few login attempts, my admin account is now locked. Resetting th...
Friday was supposed to be an easy day off where I spent some time to help a friend set up the Microsoft Azure features that he was paying for (but not using). His firm takes client data seriously and needed my help. It was content to maximize the Mic...
Hi all,I'm looking to set up 2FA for managed device login. Some users won't want to deal with any app installed on their devices and issuing stipend or company phone are out of the question. I've seen some similar questions but not sure if as time go...
My company recently deployed jumpcloud for our endpoints and I was wondering if anyone knew of a way through jumpcloud to give partial admin rights to my users. I do not want my users to reach out to me each time they need the admin password to add/...
Is there a way to configure a specific timeout length for a specific application's authentication session in Jumpcloud?
There is some way to set session Timeout only for certain logins? I.e. user1 need to do an activity all night long, but I don't want to grant an session on entire Jumpcloud env. Att,
HiJust to share my recent discoveries for Sentinel and Splunk as well as mentioning Datadog - as I find it noticeable in terms of integrations efforts and pricing.Azure Sentinel A publicly available Data Connector can be found on GitHub here. It's ju...
Patch Tuesday has become Zero Day Tuesday ... there are six actively exploited vulnerabilities this week alone. It's not always possible to wait for a patch, or a patch may not be sufficient (recall PrintNightmare, Follina, and MSDT). There was a pra...
So, I just configured SSO for YouTrack and it worked almost the first time. The hardest part was getting the SHA256 fingerprint of the JumpCloud certificate.I followed the instructions here (https://www.jetbrains.com/help/youtrack/cloud/saml-authent...
When I try to login as admin my OTP-code says; Verification code was invalid or already used.It does not work. If I try to reset my password I need also an OTP code. I'm locked out and have no clue how to solve this.
Hello Admins , How do you manage admin access rights in your organization. Since jumpcloud only offers choco package , how do you manage pushing software to employees? I am thinking to setup non admin user accounts so that we could improve security ,...
Yesterday, I was assembling some notes on the benefits of having Full Disk Encryption (FDE) being available across all Linux distros. I awoke to a high severity CVE concerning OpenSSL, which is generally used to secure communications on the (OSI) tra...
