JumpCloud
An open directory platform that puts identity, device and access management in one cloud console— directory, SSO, MFA and PAM beside MDM, patching and remote access, extended to AI agents with Agentic IAM in 2026, and how each is priced. This hub covers ten JumpCloud products.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Ten intel pages. Identity, access, devices, and the SaaS and hardware around them.
JumpCloud’s line, product by product — every card is a full intel page, from Cloud Directory, SSO, MFA and PAM to Device Management, Patch Management and Remote Access, then Password Vault, AI & SaaS Management and Asset Management. Cloud LDAP and RADIUS sit on the Cloud Directory page, JumpCloud Go and Conditional Access on the MFA page, and Access Requests on the PAM page.
JumpCloud Cloud Directory
The cloud alternative to Active Directory.
Users and groups in one SaaS directory, imported from HR, Google Workspace, M365 or AD, with Cloud LDAP and RADIUS for on-prem kit.
JumpCloud Single Sign-On (SSO)
One portal login for SAML and OIDC apps.
SAML 2.0 and OpenID Connect apps behind the User Portal, with SCIM, REST and SAML JIT provisioning sold as User Lifecycle Management.
JumpCloud Multi-Factor Authentication
Push, TOTP and passkeys, plus device trust.
The free Protect app, WebAuthn passkeys or Duo, with JumpCloud Go for passwordless login and Conditional Access on device and place.
JumpCloud Privileged Access Management
Brokered, recorded sessions to servers and DBs.
A browser gateway to SSH, RDP, VNC, databases and web consoles via a Connector you host, with scripted rotation and JIT requests.
JumpCloud Device Management
Windows, Mac, Linux, iPhone and Android in one.
Agent-managed Windows, macOS and Linux plus Apple MDM and Android Enterprise, with zero-touch Apple enrolment and DDM OS updates.
JumpCloud Patch Management
Windows KBs, Apple DDM and Ubuntu, on schedule.
Scheduled OS updates for Windows, macOS and Ubuntu, Chrome versions and Windows third-party apps, with KBs tagged by CVE and severity.
JumpCloud Remote Access
Take control of a desktop from the browser.
Live Assist with the user’s consent, Silent Assist for unattended machines and Background Tools for commands and files, over WebRTC.
JumpCloud Password Vault
Shared logins and 2FA codes in one cloud vault.
Rebuilt in 2026 as a central cloud vault replacing the legacy Password Manager; autofill via the JumpCloud Go extension and Protect.
JumpCloud AI & SaaS Management
Every SaaS and AI app staff use, found.
Finds SaaS and AI apps via the browser extension, the agent and API connectors, warns or blocks unapproved ones and tracks licences.
JumpCloud Asset Management
Every laptop and dock, with owner and warranty.
A hardware register fed by the agent and Apple Business Manager, with owner, depreciation, warranty, invoices and QR or barcode labels.
Device, SSO and Identity packages
Platform & engineJumpCloud’s editions, per user a month on annual terms: Device Management $9, SSO $11, Device Identity Management $13; priced on their pages
Platform Essentials, Platform and Prime
Platform & engineThe three Contact Sales packages: Essentials caps at 300 users, Platform adds Cloud LDAP and RADIUS, Prime adds Conditional Access.
Agentic IAM and the AI Gateway
Platform & engineEvery AI agent gets an identity tied to a human owner; the AI Gateway (Public Preview) admits approved MCP servers. Platform packages only.
AI Assistant
Platform & engineNatural-language administration: it answers questions, retrieves directory data and builds device groups. A console feature, not sold apart.
JumpCloud Workflows
Platform & engineNo-code IT automation with templates, launched in July 2026. A platform feature rather than a priced product, so it lives on this hub.
Multi-Tenant Portal for MSPs
Platform & engineOne console for managed-service providers, each client its own tenant; the Patch Management page notes it, as MSP patching runs through it.
JumpCloud sells across 4 of the products TechBag carries in identity & access. The Identity & Access guide shows how the category splits and which part is yours. →
Also sold in Endpoint Management (3 products).
Why “one directory, then the device” is the whole story
Most firms run identity in one tool and devices in another. JumpCloud putsusers, devices and access in one cloud directory, so a login can depend on a trusted device and one record follows a person from joining to leaving, and in 2026 it extended that record to AI agents. That makes per-user pricing, which package holds the feature you need and where your tenant lives the three things to settle first.
Agentic IAM
Each AI agent gets an identity tied to a human owner; AI tools and MCP servers are discovered, the AI Gateway (Public Preview) admits approved ones, and PAM rules apply. Platform tiers only.
One directory, every device
Users, groups and devices sit in one cloud directory for Windows, Apple, Linux and Android, so one record drives a person’s apps, devices and network access from joining to leaving.
Device trust as the gate
Conditional Access ties each identity to a trusted device, network or location; Mobile Device Trust covers company and BYOD phones, and Chrome Enterprise extends it to the browser.
Open and vendor-neutral
Imports from Google Workspace, Microsoft 365 and Entra ID, Active Directory and HR systems such as Workday and BambooHR; edge nodes keep LDAP logins working if the central service is down.
Start with the job you need done this quarter — leaving Active Directory, SSO for SaaS apps, or managing Macs and Windows PCs together — then pick the package that holds it.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Leader in 150 categories, G2 says
G2’s Fall 2026 Grid Reports, including No. 2 in AI Governance Tools and No. 5 in Non-Human Identity Management; a review site, not an analyst
Partner of the Year, Google Workspace: Impact
announced by JumpCloud on 21 April 2026; a partner award, not an analyst ranking
Cybersecurity Awards Summer 2026, IAM
an editorial award announced on 22 June 2026, not an analyst evaluation
MES Midmarket 100
CRN’s 2026 list, announced by JumpCloud on 13 July 2026
Most Influential CEO 2026: IAM
awarded to co-founder and CEO Rajat Bhargava, announced on 17 September 2026
ISO 27001, plus a SOC 2 Type II report
ISO 27001 certified by Schellman, announced by JumpCloud on 26 November 2024
No Gartner, Forrester or IDC placement
JumpCloud publishes no Magic Quadrant, Wave or MarketScape placement; Gartner Peer Insights is a review site
July 2023 nation-state breach, disclosed
JumpCloud said a North Korean actor targeted fewer than 5 customers and fewer than 10 devices; CVE-2023-26603 was fixed in April 2024
The company in six figures
See the platform, hear the pitch
JumpCloud Overview: Identity, Device, and Access Management
JumpCloud’s April 2026 overview of the platform: identity, devices and access managed from one console.
The Deep Dive | Governing AI Agents with JumpCloud Agentic IAM 09.25.2026
A September 2026 session on Agentic IAM: registering AI agents, tying each to an owner and governing their access.
How Apna Uses JumpCloud to Integrate their Systems to Run the Largest Job Site App in India
A 2023 conversation with Apna, the Indian jobs app, on running its systems with JumpCloud.
Where JumpCloud sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
JumpCloud Across Its Solution Areas
Each dot is a JumpCloud solution area: competitive position vs category momentum.
Where JumpCloud began: the cloud alternative to Active Directory. LDAP and RADIUS cover on-prem kit, only in Platform tiers or à la carte.
Identity Depth × Device Depth
How much of the identity job a vendor’s own products cover vs how much of the device job: directory, SSO, MFA and PAM against MDM, patching and remote support.
Directory-first; added MDM, patching, remote access, then PAM in 2025. Per-user prices are public; no Gartner, Forrester or IDC placement.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with JumpCloud?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. Who will own it?
3. What does success look like in 90 days?
Ten products, one directory
Every JumpCloud product hangs off one user and device record. Start with the job, then find the package that holds it.
Read →Package or à la carte?
Single products start at $3 a user, packages run $9 to $13, and Platform tiers are quoted. Add up your needs first.
Read →Mumbai storage is not India-only processing
Customer data rests in Mumbai, but logs and telemetry may be processed abroad, and only new tenants can choose it.
Read →Replacing Active Directory
Cloud Directory with LDAP and RADIUS is JumpCloud’s answer to on-prem AD. Map every app, file server, Wi-Fi network and VPN first.
Read →Per user, not per device
JumpCloud prices device management per user, unlike most UEM rivals. Work out devices per person before you compare quotes.
Read →Where JumpCloud fits in Identity & Access
JumpCloud sells into two Identity & Access guides, with Cloud Directory, SSO, MFA and PAM; the category sets out the routes.
Read →The acronym decoder
Every term on these pages, in one place- Cloud directory
- A directory of users, groups and devices run as a service, instead of on-prem Active Directory.
- LDAP
- An older directory protocol many on-prem apps and file servers still use to check logins.
- RADIUS
- The protocol Wi-Fi, VPNs and network gear use to ask a directory whether a user may connect.
- SAML and OIDC
- The two standards web apps use to accept a login from a central identity provider.
- SCIM
- A standard for creating, updating and removing user accounts in apps automatically.
- Passkey
- A phishing-resistant login based on WebAuthn: a device-held key replaces the password.
- Conditional access
- Rules that allow a login only from a trusted device, network or location.
- MDM
- Enrolling laptops and phones so IT can set policies, install apps and lock or wipe them remotely.
- DDM
- Apple’s Declarative Device Management, where devices apply policies and updates themselves.
- PAM
- Privileged access management: brokering, recording and limiting admin access to systems.
- Shadow AI
- Unsanctioned AI apps and coding assistants in daily use, plus whatever company data people paste into them.
- MCP
- An open standard letting AI agents call outside tools and data; each connection is access an admin should approve.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Start from the job, not the package
List what you need: directory, SSO, MFA, devices, patching or PAM. Price it à la carte at $3–5 a user, then check which package holds it for less.
Do the per-user maths
JumpCloud charges per user, and suspended users are billable. Scalefusion and Hexnode charge per device, so count devices per person before comparing.
Choose the region at sign-up
The Mumbai region is for new tenants only; moving later is a paid project. Data rests in India but logs and telemetry may not, so note it in your DPDP register.
Check the package gaps
LDAP and RADIUS need Platform; Conditional Access, Asset Management and full AI & SaaS Management need Prime; Platform Essentials leaves out Remote Access.
Use the 30-day trial properly
New accounts get 30 days with full features and 24×7 support, not a free tier. Enrol real Macs, PCs and apps, and test the LDAP, RADIUS and SSO flows you rely on.
Get it priced in rupees
JumpCloud lists prices in USD only, without VAT or GST. TechBag sizes the package, gets the Platform and PAM quotes, and invoices in INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Device Management package | Per user a month: MDM, patching, remote access, System Insights, software management | $9 annual · $11 monthly | Device-first teams |
| SSO package | Per user a month: SSO, MFA, Cloud Directory, password manager, Directory Insights, lifecycle | $11 annual · $13 monthly | Identity-first teams |
| Device Identity Management package | Per user a month: device management plus directory, MFA and identity for devices | $13 annual · $15 monthly | Devices plus logins |
| Platform Essentials | Per user; identity, devices, SSO and passwordless, 300 users maximum, no Remote Access | Contact Sales | Smaller firms wanting most of it |
| Platform / Platform Prime | Per user; Platform adds LDAP and RADIUS, Prime adds Conditional Access, AI & SaaS, Asset Management and premium support | Contact Sales | The whole platform |
| Cloud Directory | Per user a month à la carte; Cloud LDAP, RADIUS and Directory Insights $3 / $4 each | $3 annual · $4 monthly | Leaving Active Directory |
| Single Sign-On | Per user a month à la carte; User Lifecycle Management $3 / $4 more | $3 annual · $4 monthly | SaaS app logins |
| MFA | Per user a month à la carte; JumpCloud Go $5 / $6, Conditional Access $3 / $4 | $3 annual · $4 monthly | A second factor everywhere |
| Privileged Access Management | No list price or published meter; Access Requests $5 / $5 a user | Contact Sales | Server and database access |
| Device Management | Per user a month à la carte, not per device | $5 annual · $6 monthly | Mixed Windows, Apple, Linux fleets |
| Patch Management | Per user a month à la carte; in every device package | $3 annual · $4 monthly | Windows, Apple and Ubuntu |
| Remote Access | Per user a month à la carte; in device packages except Platform Essentials | $3 annual · $4 monthly | Desktop support |
| Password Vault | Per user a month à la carte; in the SSO and all Platform packages | $3 annual · $4 monthly | Shared workforce logins |
| AI & SaaS Management | Full product only in Platform Prime; SaaS License Management alone $3 / $4 | Contact Sales (Prime) | Shadow SaaS and AI |
| Asset Management | Per user a month à la carte; of the packages, only Platform Prime includes it | $3 annual · $4 monthly | Hardware register |
JumpCloud publishes USD prices per user per month (read 12 October 2026), saving up to 18% on annual billing; suspended users are billable. Accounts opened since 1 February 2024 get a 30-day trial, not a free tier. Platform Essentials, Platform, Platform Prime and PAM are Contact Sales. TechBag quotes in INR with GST.
Five pitfalls that cost buyers quarters
Trusting the old free tier
Review sites still say JumpCloud is free for 10 users and 10 devices. That applies only to accounts opened before 1 February 2024; new accounts get a 30-day trial, then pay per user.
Reading Mumbai as India-only
The India region keeps data at rest in Mumbai, but logs, telemetry and support metadata may be processed abroad, and only new tenants can pick it. Record the region in the contract and DPDP register.
Assuming the package holds it
Cloud LDAP and RADIUS need Platform, Conditional Access and full AI & SaaS Management need Prime, and Platform Essentials leaves out Remote Access. Check the package matrix line by line.
Mixing up the two vaults
Password Vault is the $3 workforce credential store; PAM (‘JumpCloud Vault’ in the docs) is the VaultOne-based privileged product, quoted separately. Name the right one on the order.
Comparing per user with per device
JumpCloud prices per user and bills suspended users; most UEM rivals price per device. With two devices a person, or a long tail of suspended leavers, the two models compare very differently.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: buyers want people, devices and now AI agents governed from one record — which is why JumpCloud put Agentic IAM and shadow-AI discovery on the same directory as its device management.
AI agents need identities
JumpCloud launched Agentic IAM in April 2026 and extended it in September, tying each agent to a human owner.
What it means for you
List the agents and MCP servers in use before you buy.
Identity and device converge
JumpCloud’s Conditional Access ties each login to a trusted device; Microsoft and Scalefusion also use device signals.
What it means for you
Ask every identity vendor how it knows the device is safe.
Shadow SaaS and shadow AI
JumpCloud added shadow-AI governance to its Resmo-based SaaS management, tracking GenAI tools and MCP token spend.
What it means for you
Find out what staff use before you write the policy.
Data residency in India
JumpCloud opened a Mumbai region on 30 April 2026, and Okta launched in-country Indian tenants in 2026.
What it means for you
Choose the region at sign-up; moving later costs money.
Questions buyers ask about JumpCloud
Facts on this page checked against public sources on .
Ready to shortlist JumpCloud?
Open any of the ten intel pages for the deep dive, or let a TechBag advisor build the case with you — the package that holds what you need, per-user maths against per-device rivals, the India region chosen at sign-up, and the quote that fits, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.