JumpCloud Directory Platform

Supports FIDO2 hardware keys, platform biometrics (Touch ID, Windows Hello), and passkeys for phishing-resistant authentication without password entry.

Evaluates contextual risk signals (device fingerprint, geolocation, IP reputation, behavioral anomaly) at each authentication and step-up challenge request, applying stronger authentication when risk is elevated.

Provides access management functions for machines, workloads, services and agentic AI.

Provides phishing-resistant MFA such as FIDO2 and X.509, with protections against compromised passwords and common MFA attacks.

Provides a directory or integrated identity repository with synchronization across all user constituencies.

Defines and enforces authorization policies that decide which users and machines can access which applications and APIs, evaluated at runtime alongside authentication.

Manages OAuth 2.0 client credentials and JWT issuance for machine-to-machine API authentication, with rate limiting and scope enforcement.

Supports basic create, read, update and delete identity life-cycle operations across all user types.

Implements SAML 2.0, OIDC, and OAuth 2.0 for SSO across SaaS and on-premises applications, with a pre-built application catalog and custom app support.

Time-bound, on-demand granting of privileged access that removes standing privilege.

Brokers secure remote privileged access for third-party and external IT staff such as vendors and service providers.

Provides role-based administration and centralized policy management for controlling access to privileged credentials and actions.

Brokering, monitoring, and recording of privileged sessions with the ability to audit and terminate them in real time.

Secure storage, automated rotation, and auditing of privileged account credentials in a vault.