JumpCloud Directory Platform

The fact that I can have an active directory and SSO managed for Macs/Ubuntu and Window users all in one place is amazing

There's a bug and it locks our users, especially in Ubunto but also in Macs and it caused a HUGE inconvenience for us. Takes support time to respond. Initial chat response is quick, but when we need the professional side ad-hock when I have an Executive locked out of his pc all day, it wasn't resolved

SSO integrations are incredibly easy to configure, no matter if you are using a prebuilt configuration or need to make a custom connector. Having SSO, LDAP, Radius, MFA in the same platform as device authentication and configuration policies is something I have not found outside of Microsoft AD and JumpCloud. There are remote management and monitoring tools out there that claim to do these things, but so far JumpCloud has proven to be incredibly simple. I am constantly amazed that my tests just work within the first few tries. I am used to Microsoft environments where testing gets very tedious and gives minimal feedback on how to make things work. JumpCloud supports MacBooks like a champion. If your office is heavily invested in MacBooks, and you are looking for an easy way to centrally manage authentication and hardening, JumpCloud is the tool for you. By far my favorite feature is "Submit an idea" right in the admin console. You get the sense that they really care about their admins and want to make a tool that is always getting better.

1) No nested user groups! I feel this is essential for identity and access governance.
2) The device policies that they have available cover a lot of the base security hardening needs, but I am excited to see just how much of the various supported OS jumpcloud will eventually be able to tap into. I would love to see JC mirror Active Directory Group Policies as much as possible, and continue to get more configurations added for MacOS.
3) iOS and Android devices are not able to be managed by JumpCloud, but I have been told this is coming by the end of 2021/early 2022.
4) Only TOTP MFA is supported for the admin console, and after getting SSO set up on a lot of tools the pain of that is getting to me, but I know they are working on this feature as well.
5) I personally believe that a remote desktop tool would make JumpCloud the king of IT tools.

Support right through the demo to the purchase, to the implementation. Success criteria are agreed between yourselves and them.
They're improving the product almost daily and have the ability to use web-hooks to monitor service status'
The ease in which you are able to integrate Gsuite (as well as multiple ways to import users from your existing central directory) It also gives you the ability to tailor the input for mass imports to limit the need to get users involved in this stage. The ability to simply submit Ideas to improve the UI. The communication from their design team and being involved in user testing so early on.
The resource and Knowledge base is extensive and easy to read - one of the best Ive used from a company in this space.
The interface is also simple to use and navigate through without being buried under complex sub menus
Straightforward email notifications from the system.
Being able to simply reimport users youve deleted without having to wait for a sync or overlapping the account when reimporting.

A few tricky bits around JC > Gsuite integration wording that take some time to get your head around when integrating and activating accounts once imported.

The admin vs user console login is dynamic and handled via one URL making it a little frustrating to see what the user profile looks like as you have to log out/open a new window to log in as a user - they should be separate logins URLS/Pages or have dropdowns within the admin page in order to switch between. The lack of global settings to apply around Security means for both user login and System security - you have to apply MFA individually to users
When removing/disabling users there isnt an ability to change what happens to their email account - they will be disabled/suspended immediately.

Not able to tailor the automated emails that come from the system to your users as it stands

Importing users via OUs inside Gsuite isnt possible (its everyone or needing to know user by user who to import (not the end of the world but worthwhile noting if you have more than 200 users + copious amounts of group emails)

Currently no ability to assign users to OUs from within JC to Gsuite.

We utilitise divisions and Departments as sub groups for organising our employees and use this hierarchy in another solution. Youre currently not able to nest groups so we had to flat out create ever department as top level inside the "system of users" section. Again a little niche for us, and shouldnt mark this awesome product down