JumpCloud
Capability scores
Methodology →- Authentication
- 4.0
- SSO & Federation
- 4.0
- Authorization
- 3.0
- Lifecycle & Provisioning
- 4.0
- MFA & Passwordless
- 4.0
- Governance & Audit
- 3.0
- Developer Experience
- 3.5
- Deployment Flexibility
- 3.5
- Pricing Transparency
- 4.5
- Support & Ecosystem
- 4.0
Scored 0–5 against a published rubric. Independent analysis, no vendor sponsorship.
Overview
JumpCloud is a private, SaaS open directory platform and, in 2026, one of the main all-in-one identity and device choices for small and mid-sized organizations that do not want to commit to the Microsoft stack. It combines a cloud directory, SSO, MFA, and cross-platform device management, and is best understood as a cloud-native replacement for Active Directory plus a separate MFA and a separate MDM. JumpCloud said in 2023 that more than 200,000 organizations rely on the platform. In January 2025 it acquired Stack Identity, an access visibility platform that finds unmonitored or unauthorized access paths.
What it is good at
Consolidation and value. One console covers directory, SSO, MFA, passwordless sign-in through JumpCloud Go, Cloud LDAP and Cloud RADIUS for legacy systems, and device management for Windows, macOS and Linux. Published per-user pricing for packages and single products is unusual and useful for lean IT teams, who can buy only the pieces they need. It plays well in heterogeneous shops, especially Mac-heavy ones that AD never served cleanly, and onboarding is fast relative to the enterprise suites.
Where it falls short
It is built for SMB and lower mid-market, and it shows at the top end: governance, access certification, and complex conditional access policy are lighter than Okta or Entra, and the third-party SaaS provisioning catalog, while solid, is smaller. The a la carte model also means features many buyers assume are included (conditional access, access requests, password management) are separate line items.
Because JumpCloud can push commands to managed devices, it is a high-value target. In its July 2023 disclosure, JumpCloud said a North Korean nation-state actor, confirmed by CrowdStrike, got into internal systems and abused the commands framework against fewer than 5 customers and fewer than 10 devices; it rotated admin API keys. Treat admin roles and API keys in the console with the care you give domain admin.
Pricing
Published per-user prices, no permanent free tier (checked 2026-11-05, JumpCloud pricing). Packages: Device Management $9, SSO $11 and Device Identity Management $13 per user per month billed annually ($11, $13 and $15 billed monthly). A la carte: Cloud Directory, MFA, SSO, User Lifecycle Management, Cloud LDAP, Cloud RADIUS and Conditional Access at $3 each ($4 monthly); JumpCloud Go passwordless $5 ($6). Platform Essentials (300 users maximum), Platform and Platform Prime are quote-based. 30-day full-platform trial.
Best for, and who should look elsewhere
Choose JumpCloud if you are an SMB or mid-market team that wants identity and device management in one affordable, cross-platform tool, especially when moving off Active Directory. Large enterprises with deep governance needs should look at Okta, Entra, or Ping. See Okta vs JumpCloud.
Bottom line
The strongest all-in-one directory, SSO, and device-management choice for SMBs, with pricing to match. Enterprises will need more.
Integrations: see what JumpCloud documents for clouds, HR systems, SaaS apps and legacy directories in the Identity Integration Matrix.
JumpCloud: frequently asked questions
- How much does JumpCloud cost?
- As of 5 November 2026, JumpCloud's pricing page lists Device Management at $9, SSO at $11 and Device Identity Management at $13 per user per month billed annually ($11, $13 and $15 billed monthly). Single products are also sold a la carte, for example Cloud Directory, MFA, SSO, Cloud LDAP and Cloud RADIUS at $3 per user per month annually and JumpCloud Go passwordless at $5. The Platform Essentials, Platform and Platform Prime suites are quote-based. There is a 30-day trial, no permanent free tier.
- What should I check in a JumpCloud evaluation?
- Confirm the package boundary first, because many features are add-ons: price your real mix of directory, SSO, MFA, device management, Cloud LDAP and RADIUS a la carte against a suite quote, and note Platform Essentials caps at 300 users. Then test cross-platform device enrollment on Windows, macOS and Linux, SCIM provisioning for your top SaaS apps, and conditional access policies. Larger buyers should check governance depth, which is lighter than Okta or Entra.
- Has JumpCloud had a security breach?
- Yes. JumpCloud disclosed on 12 July 2023 that a nation-state actor, which CrowdStrike confirmed was North Korea, phished into its internal systems and used its commands framework against a small set of customers. JumpCloud found anomalous activity on 27 June 2023 and customer impact on 5 July. It said fewer than 5 customers and fewer than 10 devices were affected, out of more than 200,000 organizations on the platform, and it rotated admin API keys.
- What are the best JumpCloud alternatives?
- For SMBs on Microsoft 365, Microsoft Entra ID with Intune is the usual alternative, since Entra ID P1 is included in Microsoft 365 Business Premium. Okta suits teams that need a larger SaaS integration catalog and deeper lifecycle automation, starting at $6 per user per month with a $1,500 annual minimum. OneLogin is another mid-market SSO option. JumpCloud's edge remains combining directory, SSO and cross-platform device management in one console.
JumpCloud comparisons
More IAM Platform vendors
All IAM Platform →- Microsoft Entra ID4.7/5
- Okta4.7/5
- Ping Identity4.4/5
- AWS IAM Identity Center4.2/5
- ForgeRock4.2/5
Related on Start with Identity
- CVESMB Server Kerberos reflection via Ghost SPNs
October 2025 follow-on to CVE-2025-33073. SMB Server elevation of privilege by combining Kerberos reflection with Ghost SPNs and DNS self-registration.
- CVEWindows SMB Client improper authentication (tampering)
Windows SMB Client improper authentication (CWE-287) that allows tampering. Not an Entra token bug, but it sits in the same Microsoft identity-adjacent patch tr
- CVEWindows SMB Kerberos reflection elevation of privilege
Kerberos authentication reflection on SMB, still abusable via Ghost SPNs after the first fix. High-severity elevation of privilege on Windows.
- VendorAvatier
niche
- VendorCA / Broadcom Identity
specialist
- VendorEntrust
strong
By SWI Community Team · Last evaluated 2026-11-05
Independent, community-driven analysis. No vendor sponsorship. Compiled from public research and community input and verified on a best-effort basis, so details may be incomplete or out of date. Scores are opinions, not advice. Trademarks belong to their owners; mention does not imply affiliation or endorsement. See the full disclaimer, or send corrections to community@startwithidentity.com.