What VPN software / hardware do you use for your office?We were previously using just a plain Ubuntu server with ppp, ipsec, and strongswan. It worked well, but I couldn't get RADIUS authentication working with it so I had to manually add / remove ac...
Hey there How many of you are staying on top of the latest cybersecurity news? It’s super important you don’t miss out on the essentials, especially as threats evolve faster than ever. To make life easy and a lot better for you, I’ve rounded up fou...
I am trying to setup JC as the identity manager to "Apple Business Manager" there isn't a ready-made connector so am trying to use a custom one, I am stumped though as to what jumpclouds SSF Config URL (Shared Signals Framework) is that Apple seems ...
Hello JumpCloud Community! October is here, and among the many fun and spooky things you might find yourself getting into as autumn sets in, nothing is more fun (and I guess, more spooky ) than thinking about security. October is officially Cybersecu...
Actually, I have a Jump cloud radius server and Meraki access points. I need my Corp SSID to authenticate with the jump cloud radius server. While configuring radius server in the jump cloud, it was asking IP add of my organization network; I gave my...
Is the JumpCloud RADIUS server susceptible to the Blast-RADIUS attack announced this week? https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-radius-spoofing-july-2024-87cCDwZ3
I just went through setting up SAML SSO with honeycomb.io and thought I would help the next person a bit. JumpCloud doesn't have a pre-built SSO application for honeycomb.io so you have to use a custom SAML app. Even with this the initial configura...
HelloSharing a documentation here to configure JumpCloud and Okta in tandem to use JumpCloud as factor for Device Trust by using OIDC, Conditional Access Policies and Okta's Policy Engine. What it does: If you're using Okta for SSO (let's say via SA...
Our CEO, @rajat, has a new blog post up on our corporate blog. In it, he gives a list of immediate steps that organizations should take once they’ve fully brought all of their systems online. Here are some excerpts from the article: When we look ba...
I am trying to setup an SSID using IPSK Cisco Meraki. Is this possible with Jumpcloud and if so is there a guide on how to do this?I have standard 802.1x using Radius setup for a different network so know how to configure that I'm just stuck with IPS...
HelloIs there any plan to incorporate Privilege Access Management functions to JumpCloud?By this, I mean that, for example, the user needs to check in/check out certain critical roles/privileges. Unless I am mistaken, this does not exist in JC. We s...
Hello,I've been keeping an eye on Jumpcloud's progress and have been wanting to switch our small company over to it from Active Directory for quite some time now. The problem is that our company has multiple users jumping on and off each of our PCs t...
Hello Earlier this months Cisco Meraki released SAML Authentication for Cisco Secure Clients (formerly known as Cisco AnyConnect). You can find the respective documentation here and until now you need to ask Meraki's support to enable the feature for...
HiJust to share my recent discoveries for Sentinel and Splunk as well as mentioning Datadog - as I find it noticeable in terms of integrations efforts and pricing.Azure Sentinel A publicly available Data Connector can be found on GitHub here. It's ju...
Hello everyone, This is a repost of a question we found on Reddit and answered by the stellar @JuergenKlaassen. This answer isn't a plug and play script that's been tested but rather a starting point resource for you to configure what you need. Fir...
Flaw in OAuth implementation for Grammerly and others; allows full account takeover.https://www.darkreading.com/remote-workforce/oauth-log-in-full-account-takeover-millions iPhone MAC address randomization hasn't ever worked. Turns out that while it ...
Did anyone else get affected by the recent issue Microsoft had where admins were receiving copies of all outbound email from other users? (Incident #EX682041, for those following.)The current discussions on reddit are the HIPAA repercussions. I used ...
Whats everyone doing to evaluate and understand their device exposure on the curl and libcurl CVE? Ive got to the point where understanding if curl is present on the device only goes so far, as there are potentially 3rdparty apps that have/utilise t...
I am curious about best practice and how jumpcloud works with ubiquiti's Identity cloud solution. My organisation uses the udm se with some APs, switches, door hubs, security cameras, etc. UID seems to implement/run its own RADIUS server through UID ...
When I try to login as admin my OTP-code says; Verification code was invalid or already used.It does not work. If I try to reset my password I need also an OTP code. I'm locked out and have no clue how to solve this.
Hello All,I recently joined an organization running JumpCloud. One of the challenges I'm trying to solution in the organization is printer access and security. I don't see anything in JC and wanted to bounce this off the group.What I'd like to do is ...
We have a Mac mini acting as a FileMaker database server, and I need to add SSO logins for database users. For some reason, the JumpCloud agent won't install, so as a workaround I added the Jumpcloud LDAP server as a native directory service per http...
Hi, Just trying out JumpCloud, working well so far. Only issue we have so far is struggling to find anything within the portal to restrict users installing software from the internet. Eg firefox, putty can run directly from Downloads. How are people ...
Configuring a Tailscale SSO connection is pretty straightforward but there are a couple of gotchas to watch out for. First, neither JumpCloud nor Tailscale consider each other a primary vendor so you have to use custom connections. Second, Tailscal...
Just wanted to jot a few notes down for integrating SSO with Redox Engine.Steps:Create the SSO app in JC and accept the defaultsCheck the "Declare Redirect Endpoint" option - Redox requires thisACS URL: https://auth.redoxengine.com/saml2/idpresponseC...
We just upgraded our Bitwarden account to allow SSO integration and I'm having a bit of a tough time with it. There are some docs for the SCIM integration with Bitwarden there is nothing for SAML. JumpCloud has a "Bitwarden" SAML template so I thou...
I create a command in jumpcloud can install sentinel one on Windows 10 it does not need admin right for it to work.Now SentinelOne tell me that in Windows 11 this no longer the case I find it hard to believe that. But I figure I reach out to ask this...
The question of how to handle DCHP and DNS without a domain controller comes up during migrations to cloud directories. The answer is there are alternatives, and the DHCP server role shouldn't installed be on a DC anyway. This brings back a few harro...
John Hammond, of Huntress fame, published a video detailing how it's possible to recover, decrypt and reveal passwords from Chrome. The attack vector will also work for Firefox. It requires access to an endpoint, so don't be too alarmed when you read...
Prerequisites JumpCloud MDMOkta MFA packageOkta identity Engine Motivation There are several ways to enhance the security level of Okta SSO access. This article presents enabling Device Trust (devices must be managed) as an additional authentication...
