Software & Hardware
For hardware and software discussions (consolidated)
71 PostsActivity in IT Topics
Resolved! Support for Debian 12 Bookworm
When can I expect to have JumpCloud support Debian 12 Bookworm?I've tried it and found that it's a good OS that I intend to make use of. I'm held back from using it until JumpCloud supports it.I suspect that the Linux JumpCloud agent would work just...
RelayState was missing when using Arc Browser
Hey ya'll, Having an issue when using JumpCloud to sign in to a google workspace account. On the arc browser (a derivative of chrome), I get the error:Google Workspace - The required response parameter RelayState was missing. We are unable to process...
SIEM integrations: Sentinel, Splunk and Datadog (quick overview)
HiJust to share my recent discoveries for Sentinel and Splunk as well as mentioning Datadog - as I find it noticeable in terms of integrations efforts and pricing.Azure Sentinel A publicly available Data Connector can be found on GitHub here. It's ju...
Enabling 801.X Auth for Ethernet on Windows via XML and Powershell
Hello everyone, This is a repost of a question we found on Reddit and answered by the stellar @JuergenKlaassen. This answer isn't a plug and play script that's been tested but rather a starting point resource for you to configure what you need. Fir...
Is it possible to script this?
Hi all,I want end users to be able to trigger a JumpCloud command, and in doing so passing their Mac's JumpCloud device name, so it can be used in the command.User does something -> JumpCloud command runs using the user's device name who triggered it...
More vulnerabilty fun, Halloween edition
Flaw in OAuth implementation for Grammerly and others; allows full account takeover.https://www.darkreading.com/remote-workforce/oauth-log-in-full-account-takeover-millions iPhone MAC address randomization hasn't ever worked. Turns out that while it ...
Error running Winget via JC command
Hi all,Very new to JC, so if this is the wrong board, I apologize. Reading through this old post, I'm working to setup a JC command to help us install some standard software to Windows machines(currently just using Reader as a tester package). I ini...
Lots of O365 Login Prompts
I have AzureAD sync'd with jumpcloud and SAML auth setup for O365 though JumpCloud. Users are logged into JC managed windows PCs with JC managed accounts. Office apps like OneDrive and Outlook keep signing themselves out or at least prompting for re-...
RDP to EC2 instances via JumpCloud SSO
Hi Folks, I hope you all had a fantastic summer break and are fully recharged for Q4 2023! It's Friday again, and what better time to share the joy of a cool AWS project with JC? Let's take a revisit of setting up SSO for AWS IAM Identity Center. Onc...
Best practice for admin level account with using RADIUS
Looking for some best practice guidance. I've inherited a site running JumpCloud. Currently each machine has a local admin level account and only JumpCloud users are bound to a machine.I want to implement RADIUS and in testing what I see is that/of...
M365 email incident (EX682041) and the legal rammifications.
Did anyone else get affected by the recent issue Microsoft had where admins were receiving copies of all outbound email from other users? (Incident #EX682041, for those following.)The current discussions on reddit are the HIPAA repercussions. I used ...
Locating and updating curl and libcurl
Whats everyone doing to evaluate and understand their device exposure on the curl and libcurl CVE? Ive got to the point where understanding if curl is present on the device only goes so far, as there are potentially 3rdparty apps that have/utilise t...
How does jumpcloud work with others such as Ubiquiti identity (UID)
I am curious about best practice and how jumpcloud works with ubiquiti's Identity cloud solution. My organisation uses the udm se with some APs, switches, door hubs, security cameras, etc. UID seems to implement/run its own RADIUS server through UID ...
Admin locked out!
When I try to login as admin my OTP-code says; Verification code was invalid or already used.It does not work. If I try to reset my password I need also an OTP code. I'm locked out and have no clue how to solve this.
Resolved! Printer access/security solutions in JumpCloud
Hello All,I recently joined an organization running JumpCloud. One of the challenges I'm trying to solution in the organization is printer access and security. I don't see anything in JC and wanted to bounce this off the group.What I'd like to do is ...
How to establish Device Trust (managed devices) for Okta by using JumpCloud as factor for authentication?
HelloSharing a documentation here to configure JumpCloud and Okta in tandem to use JumpCloud as factor for Device Trust by using OIDC, Conditional Access Policies and Okta's Policy Engine. What it does: If you're using Okta for SSO (let's say via SA...
LDAP mapping between JumpCloud and OpenDirectory?
We have a Mac mini acting as a FileMaker database server, and I need to add SSO logins for database users. For some reason, the JumpCloud agent won't install, so as a workaround I added the Jumpcloud LDAP server as a native directory service per http...
Using JumpCloud & Duo for MFA on User Portal, SSO applications, and device logins
Overview This case study shows a potential solution for JumpCloud device management working in conjunction with Duo MFA for device login. Big thanks to my fellow coworker Rickie N. for all of the heavy lifting, script writing, and background knowledg...
Integrating Linux devices with JumpCloud LDAP
Hi Folks, I hope you've all had an unforgettable summer holiday, taking the time to disconnect and create special memories with your loved ones. Sooooo, I've stumbled upon something (thanks @james_herbert & Rickie ) that potentially could be a signi...
It's never been easier to sign up for Apple Business Manager!
Apple Business Manager is Apple’s front door for a lot of businesses. It’s an incredibly powerful tool for assigning your devices to your management solution, buying apps for use within your business, and making Managed Apple IDs for your team to use...
device security apps
Hi, Just trying out JumpCloud, working well so far. Only issue we have so far is struggling to find anything within the portal to restrict users installing software from the internet. Eg firefox, putty can run directly from Downloads. How are people ...
Jumpcloud intrusion detection
Hi everyone,In response to the recent compromise (that I'm sure has impacted all of us) we (Jumpcloud MSP users) performed an investigation to determine if any of our organisations were affected. I'm aware it's extremely unlikely but better safe tha...
Invalid SSO RelayState from Identity Provider
Hello everything is fine?I'm trying to configure an SSO and when accessing via the portal, it keeps reporting the error "An error was encountered with the requested page - Invalid relayState from identity provider". This field in SSO is already confi...
Tailscale SSO OIDC
Configuring a Tailscale SSO connection is pretty straightforward but there are a couple of gotchas to watch out for. First, neither JumpCloud nor Tailscale consider each other a primary vendor so you have to use custom connections. Second, Tailscal...
Resolved! macOS 13.4 to macOS 13.4.1 upgrade woes, "the base build is not compatible with this install method," and your options
Mac Admins are continuing to face an issue with macOS 13.4 and upgrading to the latest minor revision of macOS, 13.4.1. On devices that have been assigned a delay of the minor version updates -- which Apple allows you to delay up to 90 days with an M...
IT Onboarding Handbook
Hi Folks, It's been a while and we've finally made it to Friday - TGIF!! I hope everyone is relaxed and ready to ease into the weekend. I've realised that I've posted quite a few pieces on the topic of onboarding, and I've been receiving requests...
Apple Updating Terms & Conditions in Apple Business Manager on July 27th
Periodically, Apple has to update the terms & conditions for various Apple Business Manager services. When this happens, Apple prevents syncing of new information from Apple Business Manager to any Device Managers, like JumpCloud, until the new terms...
Integrating with Redox SSO
Just wanted to jot a few notes down for integrating SSO with Redox Engine.Steps:Create the SSO app in JC and accept the defaultsCheck the "Declare Redirect Endpoint" option - Redox requires thisACS URL: https://auth.redoxengine.com/saml2/idpresponseC...
Python logs output
Hi,I wonder if it is possible to get the output of the logs from the Command Result Details with API?I try to do it with Python but didn't find any way to get it.For example:send uname for a few devices.
Resolved! Can you force an Apple device to go through MDM on deployment?
Some of our new users are not following the deployment process which means their new Apple laptops don't get the JC agent installed and their computer configured properly. I believe it's because when you first turn on your new device there is no way...
