https://cybertoolchain.io/tools/jumpcloud New releases and features in JumpCloud, tracked by The Cyber Toolchain. en Mon, 02 Nov 2026 10:54:42 GMT https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Mon, 02 Nov 2026 10:54:42 GMT JumpCloud: Ingest identity events into external SIEMs via continuous API pull in RAW or OCSF formats, or run historical export jobs from Directory Insights.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enable REST APIs for AI Agent identity management — register, retrieve, update, suspend, activate, and delete agent identities, credentials, groups, group memberships, and application assignments via the new Agents API and Agent Groups API. • Block unauthorized JumpCloud agent removal with Agent Uninstall Protection, on by default for agent v2.179.2 or later, requiring a per-device maintenance token on macOS, Windows, and Linux; manage exemptions using the `Disable Agent Uninstall Protection` policy and view protection status (`On`, `Off`, or `Failed`) from the device details or Devices list. • Create login dialogs and announcement banners for users in the User Portal, targeted by user group, with configurable severity and message type, via the new Custom Messaging feature under `Settings > User Portal > Custom Messaging`. • Block specific words, terms, and phrases from user passwords with a new Custom Banned Password List in Password Policies. • Adds two new Windows user-level policies: the User Level Custom Windows MDM (`OMA-URI`) Policy for configuring custom MDM settings on a user's profile, assignable to users or user groups on MDM-enrolled devices, and the User Level Windows Custom Registry Keys Policy for managing specific Windows registry values for an assigned user's profile under `HKEY_CURRENT_USER` at sign-in, requiring no MDM enrollment or device restart. • Let users create personal folders to organize assigned applications on the All Applications page in the User Portal, accessible at `All Applications > Folders`. • Improves JumpCloud Go by automatically registering managed Windows, macOS, and Linux devices after user sign-in, with admin control over device eligibility via device exclusion groups, and by enabling browser discovery deployment for AI and SaaS Management through third-party MDM by copying the Client ID and Client secret from Settings into the JumpCloud Go extension distribution policy. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Fri, 30 Oct 2026 13:33:56 GMT JumpCloud adds SIEM integration with OCSF export, agent uninstall protection, AI agent management APIs, custom banned passwords, and MCP-based workflow control⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Create, modify, duplicate, and troubleshoot JumpCloud Workflows from any MCP-enabled AI client using natural language, including triggering workflows and reviewing per-node outcomes, through the existing JumpCloud MCP Server connection. • Workflow connectors now support OAuth 2.0 authentication, including Client Credentials and Authorization Code with PKCE, with credentials stored in Secrets Manager and access tokens refreshed automatically. • Use new Workflow templates for automation scenarios including auto-suspending inactive users, blocking newly discovered generative AI apps, revoking Mac admin privileges on enrollment, detecting sensitive software installs, and managing pre-hire user groups. • Control App Catalog update notifications by selecting `Disable end user update notifications` when adding or editing an application, and allow users to start Required app updates from the Self Service App Catalog. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Fri, 30 Oct 2026 07:46:50 GMT JumpCloud adds SIEM integration to Directory Insights and expands Device Lock for Apple MDM with automatic PIN escrow and lock status tracking⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Ingest JumpCloud identity events into a SIEM collector using an existing API key, with continuous pull supporting RAW and OCSF-normalized formats.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Export event data as JSON or CSV files in RAW or OCSF schemas, with email notification on completion. • Access a public event catalog covering field definitions, JumpCloud-to-OCSF mappings, and sample payloads. • Device Lock MDM command for macOS now automatically generates and escrows the lock PIN, retrievable from Admin Portal under Highlights > Device Lock > View PIN. • Show a message and phone number on the Lock Screen for Mac, iPhone, and iPad via Device Lock MDM command. • Track whether a Mac is locked or unlocked from the Devices list using the new `macOS Lock Status` column. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Wed, 28 Oct 2026 20:27:08 GMT JumpCloud adds SIEM integration for Directory Insights, Agent Uninstall Protection, MCP Server for Users, Custom Risk Policies, and a Custom Banned Password List alongside se⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enable a SIEM integration in Directory Insights to continuously pull JumpCloud identity events into external SIEM platforms using an existing API key, with support for RAW and OCSF-normalized formats, or run asynchronous historical export jobs covering up to 7-day windows across a 13-month retention lookback, delivered as JSON or CSV files with email notification on completion.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Protect against unauthorized agent removal with Agent Uninstall Protection, on by default for devices running JumpCloud agent v2.179.2 or later, requiring a per-device maintenance token to uninstall on macOS, Windows, and Linux; manage it at `Device Management > Devices > Settings > Agent Uninstall Protection` and use the `Disable Agent Uninstall Protection` policy to exempt specific devices. • Automate AI Agent identity management via new REST APIs — Agents API and Agent Groups API — to register, retrieve, update, suspend, activate, and delete agent identities, manage credentials, manage agent groups, and control group memberships and application assignments. • Create login dialogs and announcement banners for User Portal users with Custom Messaging, scoped by user group and severity; available at `Settings > User Portal > Custom Messaging`. • Block specific words, terms, and phrases from user passwords with a Custom Banned Password List in Password Policies. • Connect AI clients directly to User Portal capabilities via the new JumpCloud MCP Server for Users, using OAuth sessions; enable it at `Settings > JumpCloud AI` and allow users to manage their own sessions at `Security > JumpCloud MCP` in the User Portal. • Tailor risk detection for Admin Portal, User Portal, device, and SSO application logins with Custom Risk Policies, setting per-user-group or per-application rules, choosing risk factors, adjusting score contributions, and controlling policy precedence. • Let end users organize assigned applications into personal folders on the User Portal's `All Applications > Folders` tab. • Give end users visibility into their assigned assets in the User Portal and let admins request acknowledgement on assignment or reassignment; enable at `Device Management > Asset Management > Settings and Fields > General Settings`. • Apply App Settings Privacy policies for Apple MDM to recommend privacy permission defaults for applications on supervised macOS 27, iOS 27, or iPadOS 27 or later devices, covering permissions including Accessibility, Bluetooth, Camera, Dictation, Local Network, Location, and Microphone. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Mon, 26 Oct 2026 06:49:04 GMT JumpCloud adds SIEM integration with OCSF/RAW formats, Agent Uninstall Protection, Custom Risk Policies, MCP Server for Users, and more in 2026.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds SIEM Integration in Directory Insights supporting continuous API pull ingestion using an existing API key in `RAW` or `OCSF`-normalized formats, plus asynchronous historical export jobs for up to 7-day windows across a 13-month retention lookback delivered as JSON or CSV files with email notification.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Agent Uninstall Protection, enabled by default for all devices running JumpCloud agent v2.179.2 or later on macOS, Windows, and Linux, requiring a per-device maintenance token to uninstall (tokens rotate 60 minutes after being viewed, with Directory Insights logging failed uninstall attempts, successful uninstalls, and exemption policy changes), plus a `Disable Agent Uninstall Protection` policy to exempt specific devices during maintenance, troubleshooting, or imaging. • Adds REST APIs for AI Agent and Agent Group management — `Agents API` and `Agent Groups API` — enabling programmatic registration, credential management, group membership, and application assignment. • Adds Custom Messaging feature in User Portal (`Settings > User Portal > Custom Messaging`) to create login dialogs and announcement banners scoped by user group with configurable severity/message type. • Adds JumpCloud MCP Server for Users, enabling OAuth-based connections from AI clients to User Portal capabilities; admins enable it at `Settings > JumpCloud AI` and can configure automatic session expiration or revoke sessions manually. • Adds Custom Risk Policies (`Access Risk`) to tailor risk detection for Admin Portal, User Portal, device, and SSO application logins by user group or application, with configurable risk factors, score contributions, and policy precedence. • Adds Custom Banned Password List to Password Policies, allowing admins to block specific words, terms, and phrases from user passwords. • Adds User Portal Folders so end users can organize assigned applications into private personal folders on the `All Applications` page. • Adds User Portal Asset Visibility and Acknowledgement under `Device Management > Asset Management > Settings and Fields > General Settings`, giving users visibility into assigned assets and letting admins request acknowledgement recorded in Asset History. • Adds App Settings Privacy policies for Apple MDM: `User Level macOS App Settings Privacy` (macOS 27+, supervised Macs, supports Accessibility, Bluetooth, Camera, Dictation, Local network, Location, Microphone) and `Device Level iOS and iPadOS App Settings Privacy` (iOS/iPadOS 27+, supports Bluetooth, Camera, Dictation, Local Network, Location, Location Accuracy, Microphone). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Thu, 22 Oct 2026 11:13:04 GMT JumpCloud adds Agent Uninstall Protection with maintenance tokens, third-party MDM browser discovery, and a macOS 27 blocker policy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the `Block macOS Golden Gate Installer` policy to prevent the macOS 27 Golden Gate installer from launching on MDM-enrolled Macs, automatically terminating the installer on launch. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Wed, 21 Oct 2026 15:12:32 GMT JumpCloud: Adds new Android policies for Display Settings, Autofill, Work Account authentication, and Bluetooth file sharing controls. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Fri, 16 Oct 2026 20:28:39 GMT JumpCloud adds Agent Uninstall Protection, MCP Server for Users, Custom Risk Policies, Patch Management Dashboards, and Custom Banned Password Lists in Oct 2026.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Disable Agent Uninstall Protection` policy for macOS, Windows, and Linux to exempt specific devices from the maintenance-token requirement during maintenance, troubleshooting, or imaging, and enables Agent Uninstall Protection on by default for all devices running JumpCloud agent v2.179.2 or later, requiring a per-device maintenance token to uninstall via standard methods on macOS, Windows, and Linux.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds REST APIs for managing AI Agents and Agent Groups — register, retrieve, update, suspend, activate, and delete agent identities, credentials, groups, memberships, and application assignments programmatically. • Adds `MCP Server for Users` toggle under `Settings > JumpCloud AI`, letting users connect AI clients to User Portal capabilities via OAuth sessions, with admin controls to review and revoke active sessions. • Adds Custom Banned Password List, allowing organization administrators to block specific words, terms, and phrases from user passwords. • Adds `Asset Visibility` and `Asset Acknowledgement` settings under `Device Management > Asset Management > Settings and Fields > General Settings` to give end users visibility into assigned assets and record acknowledgements in Asset History. • Adds Custom Risk Policies for Admin Portal, User Portal, device, and SSO application logins — create policies per user group or SSO application, select risk factors, adjust score contributions, and set policy precedence. • Adds `Custom Messaging` feature under `Settings > User Portal > Custom Messaging` to create login dialogs and announcement banners in the User Portal, targetable by user group with configurable severity. • Adds Patch Management Dashboards in the Admin Portal under `Device Management > Patch Management`, with unified Overview, Windows, and Apple tabs — including KB-level CVE details, severity filtering, bulk remediation, and CSV/JSON export. • Adds User Portal Folders, letting end users organize assigned applications into private personal folders on the `All Applications` page via the `Folders` tab. • Adds App Settings Privacy policies for Apple MDM: `User Level macOS App Settings Privacy` (macOS 27+, supervised Macs, assignable to users or user groups) and `Device Level iOS and iPadOS App Settings Privacy` (iOS/iPadOS 27+, supervised devices, assignable to devices or device groups), supporting permissions including Accessibility, Bluetooth, Camera, Dictation, Local Network, Location, and Microphone. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Wed, 14 Oct 2026 07:53:15 GMT JumpCloud adds REST APIs for AI Agent identity management and a Custom Messaging system for User Portal login dialogs and banners.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds REST APIs (Agents API and Agent Groups API) to register, retrieve, update, suspend, activate, and delete AI Agent identities, manage agent credentials, manage Agent Groups, and handle group memberships and application assignments programmatically.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2022 https://jumpcloud.com/support/release-notes-2022 Tue, 13 Oct 2026 13:07:51 GMT JumpCloud 2022 adds certificate-based RADIUS auth, TOTP for LDAP MFA, Remote Assist, Password Manager, OIDC SSO, and a Linux Forbidden Services policy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds new RADIUS authentication options: certificate-based (passwordless) authentication to JumpCloud RADIUS supporting any X.509 compliant certificate authority, with organizations able to import existing certificates, and RADIUS authentication using Azure AD as the identity provider, enabling secure RADIUS access without managing users and passwords outside Azure AD.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds TOTP as a supported MFA factor for LDAP applications, alongside the existing JumpCloud Protect push-notification factor. • Adds OpenID Connect (OIDC) Single Sign-On, letting users authenticate to OIDC-capable web applications with a single set of JumpCloud credentials. • Adds the `Command After Agent Install` command type, letting admins specify enrollment commands to run immediately after the JumpCloud agent is installed on new devices. • Adds a `Running` column to the commands queue to distinguish commands actively running from those waiting in the queue. • Adds new device management policies: a Linux Forbidden Services policy to remove support for service types not required for everyday Linux fleet operation, a Managed Login Items policy for macOS 13 Ventura to prevent end users from disabling persistent software such as the JumpCloud Agent, and new macOS software management policies to delay or block unwanted upgrades to macOS Ventura. • Adds JumpCloud Remote Assist for remote desktop access and support on Windows and macOS devices, free with no limits on time or number of sessions, delivered via JumpCloud Agent version 1.61.0 or later. • Adds JumpCloud Password Manager with end-to-end encrypted local sync, browser extension auto-fill, secure password sharing, and password generation — no master password required. • Adds patch management capabilities: a universal Google Chrome Browser Patch Management policy covering macOS, Windows, and Linux in a single policy, a Browser Patch Management Policy Report for compliance audits showing devices' current browser versions, and an OS Patch Management Policy Report showing which policies are applied to each device and their current patch compliance status. • Adds disk-encryption status as a new device condition in Conditional Access Policies (FileVault on macOS, system drive encrypted on Windows, root disk encrypted on Linux). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2023 https://jumpcloud.com/support/release-notes-2023 Tue, 13 Oct 2026 13:07:51 GMT JumpCloud 2023 adds passwordless Go auth, Android zero-touch EMM, remote Background Tools, dynamic groups, and Password Manager shared folders.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds JumpCloud Go, a hardware-protected, phishing-resistant passwordless login method using Apple Touch ID and Windows Hello on managed macOS and Windows devices, with user and device verification on every SSO session.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Android zero-touch enrollment support for fully managed, dedicated, and company-owned Android devices with a work profile, plus streamlined enrollment token creation. • Adds Remote Assist Background Tools enabling admins to use a remote command line and remote file transfer to access and troubleshoot end-user devices without disrupting the user's work. • Adds Self-Service Account Provisioning, letting new users bind their account to JumpCloud-managed macOS and Windows devices from the login window, including a new macOS login window with wireless connectivity controls. • Adds MDM Certificate & Token Status Board showing upcoming expiration of MDM, SSO, and AzureAD tokens and certificates, with an aggregate view for MSP admins across all tenant organizations. • Adds Dynamic Device Groups and Dynamic User Groups, allowing admins to automate group membership via attribute-based rules with an optional review step before changes take effect. • Adds Password Manager Shared Folders management from the Admin Portal with manual per-folder sync from the Password Manager desktop application, and Cloud Backup for JumpCloud Password Manager providing a secure fallback to minimize data loss risk. • Adds Push Bombing Mitigation to JumpCloud Protect, blocking more than one push notification per resource within a sixty-second period, configurable in MFA Configurations. • Adds Duo Universal Prompt support for JumpCloud MFA. • Adds an AWS Verified Access integration using JumpCloud Go, SAML, or OIDC SSO as a VPN-less remote-access solution, and a Deel SSO Connector integration with JumpCloud. Breaking changes: • MFA is now enabled by default for all new admin accounts — new admins will be required to complete a second factor on every Admin Portal login. • Conditional access policies for SSO apps now default to JumpCloud Go as the MFA method, which may change the authentication flow for existing SSO app policies. • Duo is ending support for the traditional Duo two-factor prompt on March 30, 2024; organizations using the legacy Duo prompt with JumpCloud MFA must migrate to the Duo Universal Prompt. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2024 https://jumpcloud.com/support/release-notes-2024 Tue, 13 Oct 2026 13:07:51 GMT JumpCloud 2024 adds Device Monitoring & Alerting, SaaS Management, Windows App Catalog, BYOD iOS 18 MDM, CSP-based Windows policies, and API filter improvements.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `pipe |` escape support via backslash `\` in API `in` and `nin` filter operators, enabling pipe characters within search terms for requests like `GET /systemusers?filter=department:$in:Finance | Accounting|IT`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Replaces deprecated `GET api/systemusers/reactivate/{id}` with `POST https://console.jumpcloud.com/systemusers/reactivate/{id}` accepting an `activation_email` body field. • Replaces deprecated `$ge` and `$le` Dynamic Groups `memberQuery` filter operators with `$gte` and `$lte` to align filter syntax across API list endpoints. • Introduces JumpCloud Device Monitoring and Alerting with customizable alerts for device health (availability, software, uptime, disk, battery), policy/command/software management results, directory user-addition and privilege-elevation events, and command execution monitoring, supporting Windows, macOS, and Linux endpoints. • Adds a new Windows MDM policy to configure Simple Certificate Enrollment Protocol (SCEP) via `Create a Windows SCEP Profiles Policy`. • Introduces a Windows MDM CSP framework with six new policies: Windows Wi-Fi Configuration Policy, Windows VPN Policy, Install Certificate Policy, Bluetooth Configuration Policy, Control Policy Conflict (enabled by default), and Windows Notification Service (enabled by default). • Adds `Global MFA Requirement` setting under `Account > Settings` in the Multi-Tenant Portal, allowing admins with Billing to bulk-enforce MFA for all MSP admins. • Supports BYOD enrollments of iOS/iPadOS 18+ devices in MDM via Account-Driven User Enrollment (ADUE), now in general availability. • Adds two new JumpCloud MDM policies to restrict Apple Intelligence features on iOS/iPadOS 18.1 and macOS 15.1 Sequoia devices. • Fully supports Android 15 in MDM. Breaking changes: • The `GET api/systemusers/reactivate/{id}` endpoint is deprecated and now returns a 404 error; replace with `POST https://console.jumpcloud.com/systemusers/reactivate/{id}` with `activation_email` in the request body in any script, automation, or integration. • Dynamic Groups `memberQuery` filter operators `$ge` and `$le` are deprecated and replaced with `$gte` and `$lte`; API requests using the old operators must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2025 https://jumpcloud.com/support/release-notes-2025 Tue, 13 Oct 2026 13:07:51 GMT JumpCloud adds Access Requests, MCP Server, AI Commands Builder, Shadow AI Dashboard, Custom Admin Roles, and major SSO security upgrades in 2025.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `sso_auth` event to logs for forced re-authentication, supporting `ForceAuthn="true"` in SAML and `prompt=login` in OIDC so IdP now honors step-up authentication requests from connected apps.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Includes Authentication Methods References (AMR) claims in both SAML assertions and OIDC ID tokens, tagging logins with proof of factors used (e.g., password + OTP) for Zero Trust compliance. • Introduces JumpCloud MCP Server (GA) to connect compatible AI tools and code editors to JumpCloud via the Model Context Protocol. • Launches JumpCloud Access Requests with configurable approval flows, request management in the Admin Portal and User Portal, Directory Insights tracking, and webhook integration with ticketing systems such as JIRA. • Adds IPA file support to the JumpCloud Private Repository for uploading and deploying iOS and iPadOS app packages. • Introduces the Shadow AI Dashboard under the renamed JumpCloud AI & SaaS Management for dedicated visibility into generative AI shadow IT, adoption, department usage, and most-active users. • Releases Custom Admin Roles for all direct organizations, enabling granular role tailoring based on specific responsibilities. • Introduces Service Account for APIs — service accounts not tied to individual Admin accounts — for more secure and maintainable API integrations. • Adds AI Commands Builder (GA) inside the Admin Portal to generate and refine commands for Windows, macOS, and Linux devices using plain-English prompts. • Adds a new `Asset Manager` role in the Admin Portal granting dedicated access to Asset Management without broader Admin Portal permissions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Tue, 13 Oct 2026 13:07:51 GMT JumpCloud adds MCP Server for Users, Custom Risk Policies, Patch Management Dashboards, AI knowledge-base uploads, and Android policy expansion in October 2026.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `MCP Server for Users` (enabled at `Settings > JumpCloud AI`), letting JumpCloud users connect AI clients to User Portal capabilities over OAuth; admins can review and revoke active sessions or set an automatic expiration window, and users can self-manage sessions at `Security > JumpCloud MCP` in the User Portal.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Custom Risk Policies` (at `Access Risk`) to tailor risk detection for Admin Portal, User Portal, device, and SSO application logins — choose risk factors, adjust score contributions, assign to specific user groups or SSO apps, and set policy precedence over the Default Policy. • Adds unified `Patch Management` dashboards at `Device Management > Patch Management` — an `Overview` tab for cross-platform Windows and Apple compliance, a Windows KB-centric view with CSV and JSON export, and an Apple Compliance Dashboard tracking OS rollout progress against active update policies — alongside a new Device Patch Report (Windows) under JumpCloud Reports showing per-device KB patch status (Installed, Pending, Failed) with Admin Portal preview of up to 500 rows and full CSV download. • Adds `Custom Banned Password List` to Password Policies, letting organization admins block specific words, terms, and phrases from user passwords. • Adds `App Settings Privacy` policies for Apple MDM: `User Level macOS App Settings Privacy` (macOS 27+, supervised Macs, assignable to users or user groups) and `Device Level iOS and iPadOS App Settings Privacy` (iOS/iPadOS 27+, supervised devices, assignable to devices or device groups), supporting permissions including Accessibility, Bluetooth, Camera, Dictation, Local Network, Location, and Microphone. • Adds `Asset Visibility` and `Asset Acknowledgement` in User Portal, enabled at `Device Management > Asset Management > Settings and Fields > General Settings`; acknowledgement requests and responses are recorded in `Asset History` with email notifications. • Adds `User Portal Folders` at `All Applications > Folders`, letting end users organize assigned applications into private personal folders. • Adds `Custom Messaging` for the User Portal at `Settings > User Portal > Custom Messaging`, supporting login dialogs and announcement banners scoped by user group with configurable severity and publish controls. • Adds internal knowledge-base uploads for AI Assistant: supports PDF, TXT, DOCX, and MD files (10 MB maximum per file, 25 files maximum per org), with source attribution in chat responses. • Adds new Android policies for display settings, autofill, work account authentication, default app and intent handling, and enhanced Bluetooth controls (including outbound Bluetooth file sharing and personal-profile Bluetooth restrictions on company-owned devices with a work profile). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/custom-admin-roles-release-notes-2025-preview https://jumpcloud.com/support/custom-admin-roles-release-notes-2025-preview Tue, 13 Oct 2026 13:07:51 GMT JumpCloud RBAC gains CRUD + No Access granularity for Identity Management and Application Management scopes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds CRUD operations and `No Access` permission to the `Identity Management` and `Application Management` scopes, enabling more granular per-scope admin permissions instead of bundled access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Splits `Identity Management` and `Directory and Groups Management` into separate, independently assignable scopes. • Groups `Directory Management` and `Group Management` scopes under a unified `Directory and Groups Management` permission. • Groups `SaaS Applications` and `Asset Management` scopes under a unified `SaaS and Asset Management` permission. • Moves `RADIUS Authentication` under the `Access Management` scope. • Includes `Application Templates` within the `Applications` scope. • Includes existing User Portal APIs and all User Portal operations within the `Multi-Factor Authentication` scope. Breaking changes: • The `Policy Management` scope is renamed to `Access Management`. • The `System Management` scope is renamed to `Devices`. • The `Authentication Policies` scope is renamed to `Conditional Access Policies and IP Lists`. • `Identity Management` no longer bundles directory and group scopes — `Directory and Groups Management` is now a separate scope requiring its own permission assignment. • `JumpCloud Protect` is not included in any scope and has no assignable permission. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/subscribe-to-new-feature-and-product-update-announcements https://jumpcloud.com/support/subscribe-to-new-feature-and-product-update-announcements Tue, 13 Oct 2026 13:07:51 GMT JumpCloud adds RSS feed subscriptions for release notes, agent updates, and bug fix announcements via the Help Center.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Subscribe to Support RSS Feed` option on the Release Notes and Bug Fixes page to receive notifications for any new Help Center content.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Subscribe to Release Notes and Bug Fixes RSS Feed` option to receive product release notes, agent release notes, and bug fix reports. • Adds `Subscribe to Agent Release Notes RSS Feed` option to receive agent-specific release note notifications. • Adds `Subscribe to Bug Fixes RSS Feed` option to receive bug-fix-only notifications. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/whats-new-password-manager-desktop-app https://jumpcloud.com/support/whats-new-password-manager-desktop-app Tue, 13 Oct 2026 13:07:51 GMT JumpCloud Password Manager Desktop App adds EU region support, ARM Mac build, 30K-item capacity, and admin shared-folder management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports EU region for Password Manager; users select their region on the activation page (desktop) or pairing page (browser extension) before activating their account.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a native ARM build for macOS devices with M1 and above silicon, available on the Downloads page, with automatic update to the ARM build when the chip is detected; and adds an RPM build for Linux (x64 Red Hat distributions such as Fedora) with auto-update support, in addition to the existing Debian build. • Scales item storage capacity to up to 30,000 items (without autofill) or 13,000 items (with autofill), and up to 5,000 items per shared folder; adds the ability to sort items by nicknames; and paginates the items list, displaying 100 items per page. • Adds a `Move All items` button to move all items from a shared folder at once; enables admins to create and update shared folders, and view and assign users or user groups to any shared folder; adds capture of shared folder events to sync with Directory Insights in the JumpCloud Admin Portal; and enables users to multi-select items in shared folders for bulk management. • Introduces auto-lock schedule with a default of 15 minutes of inactivity and a configurable maximum of 1,440 minutes (24 hours). • Adds an Auto Lock setting that locks the Password Manager app when the device is locked. • Enables admins to install and update the Password Manager desktop app via a new command template v.2.0.0 on Windows and macOS, removing the need for users to have admin permissions for subsequent updates. • Adds multi-delete capability for folders, allowing multiple folders to be deleted at once. • Adds item archiving functionality, letting users view, delete, and restore archived items. • Adds a Copy button to the Password History area. Breaking changes: • The `.appimage` Linux build is no longer supported as of April 18, 2024; users must migrate to the RPM or Debian build. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2022 https://jumpcloud.com/support/release-notes-2022 Tue, 06 Oct 2026 10:58:27 GMT JumpCloud: Adds `Live Chat` in the Admin Portal for Premium Support customers, automatically recognizing Premium Support status without a PIN. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2023 https://jumpcloud.com/support/release-notes-2023 Tue, 06 Oct 2026 10:58:27 GMT JumpCloud: Adds Duo Universal Prompt support for JumpCloud MFA, ahead of Duo's March 30, 2024 end-of-life for the traditional prompt. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2024 https://jumpcloud.com/support/release-notes-2024 Tue, 06 Oct 2026 10:58:27 GMT JumpCloud: Adds full Android 15 support in MDM. • Allows admins to manually add applications to SaaS Management for tracking, warning, and blocking before automatic discovery occurs. • Enables JumpCloud Go sessions to automatically refresh when a user logs in to or unlocks their managed device. Breaking changes: • The `GET api/systemusers/reactivate/{id}` endpoint is deprecated and now returns a 404 error; replace with `POST https://console.jumpcloud.com/systemusers/reactivate/{id}` in all scripts, automations, and integrations. • The `$le` and `$ge` Dynamic Groups `memberQuery` filter operators are deprecated; replace with `$lte` and `$gte` in all API requests using Dynamic Groups filters. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2025 https://jumpcloud.com/support/release-notes-2025 Tue, 06 Oct 2026 10:58:27 GMT JumpCloud: Adds `ForceAuthn="true"` (SAML) and `prompt=login` (OIDC) support so identity provider honors SP/RP requests for fresh logins even with an active session. • Adds User Group Exclusion from JumpCloud Protect Unified MFA, allowing specified groups to use TOTP only instead of Push. Breaking changes: • JumpCloud LDAP now removes weak TLS cipher suites (CBC mode, SHA-1/SHA-256 with RSA or ECDHE key exchange) and enforces only: `TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`, `TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256`, `TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384`, `TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384`, `TLS_RSA_WITH_AES_128_GCM_SHA256`; clients configured with any removed suite will fail to connect. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Tue, 06 Oct 2026 10:58:27 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/custom-admin-roles-release-notes-2025-preview https://jumpcloud.com/support/custom-admin-roles-release-notes-2025-preview Tue, 06 Oct 2026 10:58:27 GMT JumpCloud: Restructures RBAC scope hierarchy with `Policy Management` renamed to `Access Management`, `System Management` to `Devices`, and `Authentication Policies` Breaking changes: • The `Policy Management` scope is renamed to `Access Management`; any custom roles or documentation referencing `Policy Management` must be updated. • The `System Management` scope is renamed to `Devices`; any custom roles or documentation referencing `System Management` must be updated. • The `Authentication Policies` scope is renamed to `Conditional Access Policies and IP Lists`; any custom roles or documentation referencing `Authentication Policies` must be updated. • `Identity Management` no longer bundles directory and group management — those are now in the separate `Directory and Groups Management` scope; roles relying on `Identity Management` for directory/group access must be updated. • `SaaS Applications` and `Asset Management` are now grouped under `SaaS and Asset Management`; roles referencing the former standalone scopes must be updated. • `RADIUS Authentication` has moved from its previous scope to `Access Management`; roles that granted RADIUS access must be reviewed and updated. • User Portal APIs and operations previously housed in other scopes are now exclusively under `Multi-Factor Authentication`; roles managing User Portal access must be updated. • `JumpCloud Protect` is not included in any scope; roles expecting Protect coverage will not enforce it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/subscribe-to-new-feature-and-product-update-announcements https://jumpcloud.com/support/subscribe-to-new-feature-and-product-update-announcements Tue, 06 Oct 2026 10:58:27 GMT JumpCloud: Adds RSS feed subscriptions via the Help Center to track 'What's New' content, product release notes, agent release notes, and bug fix reports.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/whats-new-password-manager-desktop-app https://jumpcloud.com/support/whats-new-password-manager-desktop-app Tue, 06 Oct 2026 10:58:27 GMT JumpCloud: Paginates the items list to display 100 items per page for improved navigation of large vaults. Breaking changes: • The `.appimage` Linux build is no longer supported as of April 18, 2024; users must migrate to the RPM or Debian build. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2022 https://jumpcloud.com/support/release-notes-2022 Mon, 05 Oct 2026 20:35:14 GMT JumpCloud 2022 adds certificate-based RADIUS auth, TOTP for LDAP, Password Manager, Remote Assist, OIDC SSO, and MSP command templates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Command After Agent Install` command type so admins can specify enrollment commands to run immediately after the JumpCloud agent is installed on new devices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Running` column to the commands queue to distinguish commands waiting in the queue from commands that are actively running. • Adds certificate (passwordless) based authentication to JumpCloud RADIUS, supporting certificates from any X.509 compliant certificate authority. • Adds TOTP (Time-based One-time Password) as a supported MFA factor for LDAP applications, in addition to JumpCloud Protect push notifications. • Adds disk encryption device condition to Conditional Access Policies — allowing or denying access based on FileVault (macOS), system drive encryption (Windows), or root disk encryption (Linux). • Adds OpenID Connect (OIDC) Single Sign-On (SSO) support for OIDC-capable web applications. • Introduces JumpCloud Remote Assist for remote desktop access and support on Windows and macOS devices, free with no limits on time or number of sessions (requires JumpCloud Agent v1.61.0 or later). • Introduces JumpCloud Password Manager with end-to-end encrypted local sync, browser extension auto-fill, secure password sharing, and password generation — no master password required. • Adds MSP Create Custom Command Templates so MSP admins can create and apply device command templates across tenant organizations. • Adds universal Browser Patch Management policy to keep Google Chrome up to date across macOS, Windows, and Linux from a single policy. • Adds RADIUS authentication with Azure AD credentials, enabling secure RADIUS access through JumpCloud without managing users outside of Azure AD. • Adds Linux Forbidden Services Policy to remove support for service types not required for everyday Linux fleet operation. • Adds SentinelOne integration via JumpCloud Commands to download and install the SentinelOne Agent on macOS, Windows, and Linux devices. • Adds OS Patch Management Policy Report showing which policies are applied to each device and their current patch compliance status. • Adds Browser Patch Management Policy Report for compliance audit evidence of devices' current browser versions. • Adds MDM Upcoming Certificate Expirations widget to the Admin Portal and Multi-Tenant Portal homepage for at-a-glance MDM, VPP, and Automated Device Enrollment certificate lifecycle visibility. • Adds macOS software update scheduling from the Admin Portal, including force-update of a single macOS device with configurable user delay/cancel flexibility. • Adds new software management policies to delay or block macOS Ventura upgrades on managed devices. • Adds Managed Login Items policy for macOS 13 Ventura to prevent users from disabling persistent software such as the JumpCloud Agent. • Adds MTP Homepage widget showing aggregate view of reports across all tenant organizations available for download in the last 24 hours, with bulk export as JSON or CSV. • Adds Identity First Login (two-screen login flow) to the User Portal and SSO applications, as a foundation for passwordless and federation-based authentication. • Adds JumpCloud Case Portal centralizing all organization support cases and ideas from any administrator into a filterable list with clickable case numbers. • Adds JumpCloud Linux Fedora 37 support for the JumpCloud agent. • Expands Microsoft 365 integration to include M365/Azure AD security groups. • Adds trial recap feature summarizing feature usage during a JumpCloud trial. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2023 https://jumpcloud.com/support/release-notes-2023 Mon, 05 Oct 2026 20:35:14 GMT JumpCloud 2023 adds passwordless Go auth, Android zero-touch enrollment, Remote Assist background tools, dynamic groups, and push-bombing mitigation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `JumpCloud Go` browser extension for hardware-protected, phishing-resistant passwordless login on managed macOS and Windows devices using Apple Touch ID and Windows Hello.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Conditional access policies for SSO apps now default to `JumpCloud Go` as the MFA method, with user and device verification on every application session. • Adds Android zero-touch enrollment support for fully managed, dedicated, and company-owned Android devices with a work profile via Android EMM. • Adds Remote Assist `Background Tools` with remote command line and remote file transfer capabilities for accessing end-user devices without disrupting their work. • Adds Self-Service Account Provisioning, letting new users bind their account to JumpCloud-managed macOS and Windows devices directly from the login window. • Adds `MDM Certificate & Token Status Board` in the Admin Portal and Multi-Tenant Portal to track expiration of MDM, SSO, and AzureAD tokens and certificates. • Adds push-bombing mitigation to JumpCloud Protect, blocking more than one notification per resource within a sixty-second period; configurable in `MFA Configurations`. • Adds `Cloud Backup` option for JumpCloud Password Manager, enabling admins to enable a secure fallback to minimize data loss. • Adds shared folder management for JumpCloud Password Manager, allowing admins to manage assignments and permissions from the admin portal and users to manually sync individual folders. • Adds `Deel SSO Connector` integration for connecting JumpCloud with Deel. • Enables AWS Verified Access integration using JumpCloud Go, SAML, or OIDC SSO as a VPN-less solution for remote access to corporate resources. • Adds support for running ad hoc commands on devices directly from the Multi-Tenant Portal and Admin Portal. • Adds Dynamic Groups for devices and users, enabling admins to automate group membership with attribute-based rules including new `Vendor`, `Public IP Address` (device), and `Manager` (user) attributes. • Adds two new Remote Assist capabilities: user switching between accounts on Windows devices and a `Ctrl+Alt+Del` command shortcut from the Session Options toolbar. • Adds fully managed and dedicated Android EMM device support with 7 new policies including Factory Reset Protection, Kiosk Mode, and System Updates. • Adds ability for admins to add new users and devices, export user and device lists, and apply bulk actions from the Multi-Tenant Portal. • Splits WebAuthn into separate credentials for Security Keys and Device authenticators during enrollment. • Adds `Password Date` as a viewable column on the Users page in the Admin Portal. • MFA is now enabled by default for new admin accounts in the Admin Portal. • Adds Password Manager Desktop App for Linux as a new Debian (Ubuntu x86 OS) build with automatic updates support. • Adds support for Admins viewing and interacting with the initial Windows Server login screen via Remote Assist. • Adds ADI support for installation on Windows Server 2022 domain controllers and member servers without workarounds. • Adds `All Applications` and `Favorites` tabs to the Applications area of the User Portal, with a responsive search field on both tabs. • Adds MSP billing visibility for committed-user license contracts, including available and consumed user license counts and contract download. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2024 https://jumpcloud.com/support/release-notes-2024 Mon, 05 Oct 2026 20:35:14 GMT JumpCloud 2024 adds Device Monitoring & Alerting, Windows App Catalog, SaaS Management, CSP-based MDM policies, and multi-IP RADIUS support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `GET /systemusers?filter=department:$in:Finance | Accounting|IT` support — the pipe `|` character can now be escaped with `\` inside API `in` and `nin` filter search terms.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Replaces deprecated `GET api/systemusers/reactivate/{id}` with `POST https://console.jumpcloud.com/systemusers/reactivate/{id}` (old endpoint now returns 404). • Renames Dynamic Groups `memberQuery` filter operators `$ge` and `$le` to `$gte` and `$lte` to align API filter syntax across all list endpoints. • Adds six new Windows CSP-based MDM policies: Windows Wi-Fi Configuration Policy, Windows VPN Policy, Install Certificate Policy, Bluetooth Configuration Policy, Control Policy Conflict, and Windows Notification Service. • Adds a Windows MDM policy to configure Simple Certificate Enrollment Protocol (`SCEP`) for Windows devices. • New JumpCloud Device Monitoring and Alerting subsystem — monitor device health (availability, software, uptime, disk, battery), policy/command/software management results, directory user-addition and privilege-elevation events, and custom alerts via command execution monitoring; supported on Windows, macOS, and Linux. • Adds the JumpCloud App Catalog for Windows, enabling install and auto-update management of 10 popular apps: 1Password, Adobe Acrobat Reader DC, Chrome, Firefox, Google Drive, OneDrive, OpenVPN, Slack, Webex, and Zoom. • Adds support for multiple IP addresses in a single RADIUS server configuration. • Adds Account-Driven User Enrollment (ADUE) for BYOD iOS/iPadOS 18+ devices in MDM (now generally available). • Adds two new JumpCloud MDM policies to control Apple Intelligence features on iOS/iPadOS 18.1 and macOS 15.1 Sequoia. • New SaaS Management feature — discover and track shadow IT SaaS app usage via the JumpCloud Go browser extension, categorize apps, restrict access with customizable warning or blocking messaging, and track licensing information. • Adds manual app addition to SaaS Management, allowing admins to track, warn, and block access to applications before automatic discovery. • Extends SaaS Management so JumpCloud Go is no longer required for discovering unmanaged applications (browser extension alone is sufficient when Go is not enabled). • Adds `⌘/Ctrl + K` keyboard shortcut for global search and navigation in the Admin Portal. • Adds a User Portal > Security > Multi-Factor Authentication section to manage JumpCloud Go sessions on user devices. • Adds JumpCloud Go session auto-refresh on device login or unlock, enabling seamless access to JumpCloud-protected browser resources without additional verification. • Adds a Global MFA Requirement setting under Account > Settings in the Multi-Tenant Portal, allowing Billing admins to bulk-enforce MFA for all MSP admins. • Remote Assist now ships two separate architecture-specific packages — ARM64 for Apple Silicon and x86_64 for Intel — with automatic binary selection. • Remote Assist now automatically detects and terminates unresponsive existing agent instances on the end-user device before establishing a new connection. • Password Manager Desktop App adds multi-select functionality, item sorting, and new Settings options including `Download Logs` and `Keyboard Shortcuts`. • Admins can now enable password reset from the User Portal when MFA is enforced but the user has not yet enrolled. Breaking changes: • The `GET api/systemusers/reactivate/{id}` endpoint is deprecated and now returns a 404 error; replace with `POST https://console.jumpcloud.com/systemusers/reactivate/{id}` in all scripts, automations, and integrations. • Dynamic Groups `memberQuery` API filter operators `$ge` and `$le` are deprecated and replaced by `$gte` and `$lte`; existing API scripts using the old operators must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2025 https://jumpcloud.com/support/release-notes-2025 Mon, 05 Oct 2026 20:35:14 GMT JumpCloud adds MCP Server, Access Requests, Shadow AI Dashboard, Custom Admin Roles, and SAML/OIDC forced re-auth with AMR claims in 2025⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `sso_auth` event to logs specifically for forced re-authentication events, providing visibility for compliance and security reviews.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports `ForceAuthn="true"` in SAML and `prompt=login` in OIDC so applications can trigger step-up authentication without ending the user's existing session. • Includes Authentication Methods References (AMR) claims in both SAML assertions and OIDC ID tokens, tagging logins with proof of factors used (e.g., password + OTP). • Introduces the JumpCloud MCP Server (GA) to connect compatible AI tools to JumpCloud using the Model Context Protocol, enabling interaction with org data and admin capabilities from existing AI tools and code editors. • Launches JumpCloud Access Requests, enabling configurable approval flows, request/approval management in the JumpCloud console, Access Request event tracking in Directory Insights, and webhook integration with ticketing systems such as JIRA. • Adds Shadow AI Dashboard under the renamed JumpCloud AI & SaaS Management product, providing visibility into generative AI shadow IT usage, adoption metrics, department breakdowns, and most active users. • Releases Custom Admin Roles for all direct organizations, enabling admins to tailor roles based on specific responsibilities. • Introduces Service Accounts for APIs that are not tied to individual Admin accounts, improving security and reliability of integrations. • Adds `Apple Business Manager` as a new service discovery method for Account-driven Enrollment in Apple MDM, retrieving the redirect URL directly from the configured MDM server in ABM. • Introduces a new `Asset Manager` role in the Admin Portal, providing dedicated access to Asset Management without granting broader admin access. • Adds File Upload functionality to Asset Management, supporting invoices/contracts via the `Invoice` field under `Purchase Details`, including custom fields of the `File Upload` type. • Adds `Disk Size` to `Hardware Specifications` in Asset Management for tracking device storage capacity. • Adds `Local Device Accounts` to the Asset Detail page under `Device Management` for visibility into local users on a device. • Adds asset cloning in Asset Management, automatically clearing unique fields to prevent duplicates. • Adds IPA file support to the JumpCloud Private Repository for deploying IPA-based app packages to iOS and iPadOS devices. • Introduces tracking of the source IP of incoming LDAP requests for enhanced security and traceability. • Releases JumpCloud AI Commands Builder (GA) for creating and refining commands for Windows, macOS, and Linux devices using plain-English prompts within the Admin Portal. • Allows excluding specific user groups from JumpCloud Protect Push enforcement, permitting those users to use TOTP only. • Adds faster reconnect time for EAP connections by allowing recently authenticated devices to skip the full security handshake using a cached session credential. • Releases new Windows Personalization policies: Taskbar Customization, Screen Saver Configuration, and Desktop and Lock Screen Settings policies. • Updates Mac Personalization policies for Dock Settings and Items and Lock Screen (Screen Saver) with new functionality. • Enforces modern TLS cipher suites for all LDAP TLS connections, permitting only `TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`, `TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256`, `TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384`, `TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384`, and `TLS_RSA_WITH_AES_128_GCM_SHA256`. • Launches SaaS License Management (GA) for automated license tracking and cost optimization across supported SaaS applications via connectors. • Refines Directory Insights filters, splitting `Application Name` into `Application Name`, `Application Display Name`, and `Application Display Label`, and `Resource Name` into `Resource Name`, `Resource Display Name`, and `Resource Display Label`. • Adds Windows 11 25H2 support for JumpCloud Windows management components. • Introduces the Customer Portal for tracking and managing support cases, including sortable columns for `Last Modified Date`, `Account`, and `Requester`, plus attachment uploads and inline ticket editing. • Enables MTP admins to access, view, and create support cases for all tenant organizations managed by their MTP account. Breaking changes: • LDAP TLS connections now reject cipher suites using CBC mode and SHA-1/SHA-256 integrity with RSA or ECDHE key exchange; only `TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256`, `TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256`, `TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384`, `TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384`, and `TLS_RSA_WITH_AES_128_GCM_SHA256` are permitted. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Mon, 05 Oct 2026 20:35:14 GMT JumpCloud adds MCP Server for Users, Custom Risk Policies, Patch Management Dashboards, AI knowledge-base uploads, and expanded Android/Apple MDM policies.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Patch Management Dashboards` at Device Management > Patch Management, with a unified Overview tab plus dedicated Windows and Apple tabs — covering fleet patch compliance, KB-level drill-down, CVE details, bulk remediation, and CSV/JSON export. • Adds Device Patch Report (Windows) under JumpCloud Reports, showing per-device KB patch status (Installed, Pending, Failed) with preview of up to 500 rows and full CSV export. • Adds `Knowledge Base Uploads` for AI Assistant, letting admins upload internal docs (PDF, TXT, DOCX, MD; 10 MB per file, 25 files per org) into a private org-scoped knowledge base that the assistant cites by source document. • Adds new Android policies for Display Settings, Autofill, Work Account authentication, Default App and Intent Handling, and enhanced Bluetooth Restrictions (including outbound Bluetooth file sharing and personal-profile Bluetooth sharing on company-owned devices). • Adds `AI Gateway Dashboard` tab with org-wide MCP server usage metrics, tool call volume, error rates, trend charts, and per-server drill-down. • Adds `client authentication type` configuration for agent OAuth credentials (Authentication tab): `Client secret basic` (credentials in authorization header, default) or `Client secret post` (credentials in request body). • Enhances `Dormant Application Access` detection so it triggers when a user signs back into an SSO application after a configurable inactivity threshold (set in Access Risk > Configuration) rather than on first-time access, reducing noise from newly provisioned apps. • Enables updating the binary of an existing custom application in the Private Repository via `Update Version` on the application's Details tab, deploying to already-associated devices without re-creating the app or reassigning device groups; Windows EXE updates require an install success exit code. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/custom-admin-roles-release-notes-2025-preview https://jumpcloud.com/support/custom-admin-roles-release-notes-2025-preview Mon, 05 Oct 2026 20:35:14 GMT JumpCloud RBAC preview adds CRUD-level granularity to Identity Management and Application Management scopes and reorganizes permission categories.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds CRUD operations and `No Access` permission to `Identity Management` and `Application Management` scopes for more granular admin role assignments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Splits `Identity Management` and `Directory and Groups Management` into separate scopes, with `Directory Management` and `Group Management` nested under `Directory and Groups Management`. • Groups `SaaS Applications` and `Asset Management` scopes under a unified `SaaS and Asset Management` permissions category. • Moves `RADIUS Authentication` under the `Access Management` scope. • Includes `Application Templates` in the `Applications` scope. • Moves all User Portal operations and existing User Portal APIs into the `Multi-Factor Authentication` scope. Breaking changes: • `Policy Management` scope is renamed to `Access Management`. • `System Management` scope is renamed to `Devices`. • `Authentication Policies` scope is renamed to `Conditional Access Policies and IP Lists`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/subscribe-to-new-feature-and-product-update-announcements https://jumpcloud.com/support/subscribe-to-new-feature-and-product-update-announcements Mon, 05 Oct 2026 20:35:14 GMT JumpCloud adds RSS feed subscriptions for release notes, agent updates, and bug fix announcements.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Subscribe to Support RSS Feed` option on the Release Notes and Bug Fixes page to receive notifications for any new Help Center content.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Subscribe to Release Notes and Bug Fixes RSS Feed` option to receive targeted notifications for product release notes, agent release notes, and bug fix reports. • Adds `Subscribe to Agent Release Notes RSS Feed` option to receive notifications specifically for agent release notes. • Adds `Subscribe to Bug Fixes RSS Feed` option to receive notifications specifically for bug fix content. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/whats-new-password-manager-desktop-app https://jumpcloud.com/support/whats-new-password-manager-desktop-app Mon, 05 Oct 2026 20:35:14 GMT JumpCloud Password Manager Desktop App adds EU region support, 30K-item capacity, ARM/RPM builds, and admin-managed shared folders.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds EU region support for Password Manager; users select their region on the activation page (desktop) or pairing page (browser extension) before activating their account.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Raises item storage capacity to 13,000 items with autofill enabled, or up to 30,000 items when autofill is not used; a single shared folder can hold up to 5,000 items. • Introduces a 'Move All items' button in shared folders to relocate all items from a folder in one action. • Adds an auto-lock schedule with a default of 15 minutes of inactivity and a maximum of 1,440 minutes (24 hours). • Admins can install and update the Password Manager desktop app via the new command template v.2.0.0 on Windows and macOS, eliminating the need for users to have admin permissions for subsequent updates. • Items list is now paginated, displaying 100 items per page. • Adds ability for users to sort items by nicknames. • Admins can create and update shared folders, and view and assign users or user groups to any shared folder. • Adds native ARM build for macOS devices with M-series silicon (M1 and above), available on the Downloads page, with automatic update to the ARM build when the device chip is M1 or above. • Adds an Auto Lock setting that locks the Password Manager app when the device is locked. • Adds ability to delete multiple folders at once. • Adds RPM build for Linux on x64 Red Hat distributions (Fedora), auto-updating and stable, in addition to the existing Debian build. • Adds archiving functionality; users can view, delete, and restore archived items. • Adds a 'Copy' button to the Password History area. • Adds capture of shared folder events to sync with Directory Insights in the JumpCloud Admin Portal. • Enhances CSV export for the legacy Password Manager with new data fields to support migration to JumpCloud Vault. • Users can multi-select items to manage them in bulk. • Users can sort items according to various criteria. • Adds a 'What's New' link on the Settings > General screen for access to a running list of desktop app updates. Breaking changes: • The `.appimage` Linux build is no longer supported as of April 18, 2024; users must migrate to the RPM or Debian build. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Mon, 05 Oct 2026 07:55:40 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Sun, 04 Oct 2026 07:49:10 GMT JumpCloud adds MCP Server for Users, Custom Risk Policies, App Settings Privacy for Apple MDM, and User Portal Folders in its September 2026 release.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables `Asset Visibility` and `Asset Acknowledgement` via `Device Management > Asset Management > Settings and Fields > General Settings` so end users see assigned assets in the User Portal and admins can request acknowledgement recorded in `Asset History`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds JumpCloud MCP Server for Users, letting users connect AI clients to User Portal capabilities over OAuth; admins toggle it on and can configure automatic session expiration or manually revoke sessions, and users manage their own sessions under `JumpCloud MCP` in the User Portal. • Adds Custom Risk Policies for Admin Portal, User Portal, device, and SSO application logins, allowing admins to select risk factors, adjust score contributions, and set policy precedence per user group or SSO application, with a Default Policy covering unmatched logins. • Adds App Settings Privacy policies for Apple MDM: a User Level macOS policy (supervised Macs running macOS 27+, assignable to users or user groups, covering Accessibility, Bluetooth, Camera, Dictation, Local Network, Location, and Microphone) and a Device Level iOS/iPadOS policy (supervised iPhones and iPads running iOS 27+ or iPadOS 27+, assignable to devices or device groups, covering Bluetooth, Camera, Dictation, Local Network, Location, Location Accuracy, and Microphone). • Adds a Custom Banned Password List to Password Policies, letting organization administrators block specific words, terms, and phrases from user passwords. • Adds JumpCloud Go automatic device registration for managed Windows, macOS, and Linux devices; admins control eligibility via device exclusion groups and can fall back to manual registration. • Adds User Portal Folders so end users can organize assigned applications into private personal folders from the `Folders` tab on the `All Applications` page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://docs.jumpcloud.com https://docs.jumpcloud.com Sat, 03 Oct 2026 13:07:29 GMT JumpCloud Events API now exposes OCSF-mapped identity events for direct ingestion into external SIEMs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Events API support for pulling JumpCloud identity events into an external SIEM, with OCSF-mapped event types, connectivity validation, and continuous ingestion.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2022 https://jumpcloud.com/support/release-notes-2022 Fri, 02 Oct 2026 17:54:04 GMT JumpCloud: Adds M365/Azure AD security group support to JumpCloud's Microsoft 365 directory integration. • Adds MDM Upcoming Certificate Expirations widget to the Admin Portal and Multi-Tenant Portal homepage for at-a-glance MDM, VPP, and Automated Device Enrollment certificate lifecycle visibility. • Adds trial recap view summarising feature usage during a JumpCloud feature trial. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2023 https://jumpcloud.com/support/release-notes-2023 Fri, 02 Oct 2026 17:54:04 GMT JumpCloud: Adds Remote Assist support for admins to view and interact with the initial login screen for Windows servers. • Adds Active Directory Integration (ADI) support on 2022 domain controllers and member servers without workarounds or decreased functionality. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2024 https://jumpcloud.com/support/release-notes-2024 Fri, 02 Oct 2026 17:54:04 GMT JumpCloud: Adds `POST https://console.jumpcloud.com/systemusers/reactivate/{id}` endpoint to replace the now-defunct `GET` variant for reactivating system users. • Adds SaaS Management capability to discover, track, warn, and block shadow IT SaaS apps via the JumpCloud Go browser extension, with manual app addition, usage insights, and licensing tracking. • Adds support for multiple IP addresses in a single RADIUS server configuration. • Adds Android 15 support in MDM. • Enables SaaS Management app discovery without requiring JumpCloud Go to be enabled as a feature (browser extension still required when JumpCloud Go is not enabled). • JumpCloud Go sessions now automatically refresh on device login or unlock, removing additional browser verification challenges. Breaking changes: • The `GET` request for `api/systemusers/reactivate/{id}` is deprecated and now returns a 404 error; replace with `POST https://console.jumpcloud.com/systemusers/reactivate/{id}` with `activation_email` in the request body. • Dynamic Groups `memberQuery` API filter operators `$le` and `$ge` are deprecated and replaced by `$lte` and `$gte`; existing API scripts using `$le` or `$ge` must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2025 https://jumpcloud.com/support/release-notes-2025 Fri, 02 Oct 2026 17:54:04 GMT JumpCloud adds Access Requests, MCP Server, Shadow AI Dashboard, Custom Admin Roles, and major SSO/MFA upgrades in 2025⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `sso_auth` event to logs for forced re-authentication events, providing audit visibility for compliance reviews.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • IdP now honors `ForceAuthn="true"` in SAML and `prompt=login` in OIDC, enabling step-up authentication without ending the user session. • Includes Authentication Methods References (AMR) claims in SAML assertions and OIDC ID tokens to prove which factors (e.g., password + OTP) were used at login. • Introduces JumpCloud MCP Server (GA) — connects compatible AI tools and code editors to JumpCloud via the Model Context Protocol. • Introduces JumpCloud Access Requests — configure approval flows, manage access requests from the User Portal, and track events in Directory Insights. • Supports webhook integration for Access Requests to create tickets and receive real-time notifications in external systems such as JIRA. • Adds asset cloning in Asset Management to streamline creation of assets with shared hardware configurations. • Expands macOS Personalization policies with updated Dock Settings and Items and Lock Screen (Screen Saver) policies. • Adds Windows 11 25H2 support to JumpCloud's Windows management components. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Fri, 02 Oct 2026 17:54:04 GMT JumpCloud: Adds `Custom Banned Password List` to Password Policies, letting admins block specific words, terms, and phrases from user passwords. • Adds unified `Patch Management` dashboards under `Device Management > Patch Management`, including cross-platform Overview, Windows KB-centric Patch List (with CSV and JSON export), and Apple OS Compliance views. • Refines `Dormant Application Access` detection in Access Risk to flag re-access after inactivity above the configured threshold (set in `Access Risk > Configuration`) rather than flagging all first-time access. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/custom-admin-roles-release-notes-2025-preview https://jumpcloud.com/support/custom-admin-roles-release-notes-2025-preview Fri, 02 Oct 2026 17:54:04 GMT Breaking changes: • The Policy Management scope is renamed to Access Management. • The System Management scope is renamed to Devices. • The Authentication Policies scope is renamed to Conditional Access Policies and IP Lists. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/subscribe-to-new-feature-and-product-update-announcements https://jumpcloud.com/support/subscribe-to-new-feature-and-product-update-announcements Fri, 02 Oct 2026 17:54:04 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/whats-new-password-manager-desktop-app https://jumpcloud.com/support/whats-new-password-manager-desktop-app Fri, 02 Oct 2026 17:54:04 GMT JumpCloud: Adds the ability to sort items by nicknames. • Enables users to multi-select items for bulk management. Breaking changes: • The `.appimage` Linux build is no longer supported as of version 2.2.197 (April 18, 2024); users must migrate to the RPM or Debian build. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/custom-admin-roles-release-notes-2025-preview https://jumpcloud.com/support/custom-admin-roles-release-notes-2025-preview Thu, 01 Oct 2026 18:21:37 GMT JumpCloud RBAC gains CRUD-level permissions for Identity Management and Application Management, plus major scope reorganization.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds CRUD operations and 'No Access' permission to the Identity Management and Application Management scopes, enabling more granular admin permissions for users and applications.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Renames 'Policy Management' to 'Access Management', 'System Management' to 'Devices', and 'Authentication Policies' to 'Conditional Access Policies and IP Lists'. • Splits Identity Management so it hosts user-related scopes only, with Directory and Groups Management now available as a separate scope. • Moves Directory Management and Group Management scopes under a unified 'Directory and Groups Management' permissions category. • Moves SaaS Applications and Asset Management scopes under a new 'SaaS and Asset Management' permissions category. • Moves RADIUS Authentication under Access Management. • Includes Application Templates in the Applications scope. • Includes all User Portal-related APIs and operations under the Multi-Factor Authentication scope. Breaking changes: • The 'Policy Management' scope is renamed to 'Access Management' — any custom roles or documentation referencing 'Policy Management' must be updated. • The 'System Management' scope is renamed to 'Devices' — any custom roles or documentation referencing 'System Management' must be updated. • The 'Authentication Policies' scope is renamed to 'Conditional Access Policies and IP Lists' — any custom roles or documentation referencing 'Authentication Policies' must be updated. • Identity Management no longer bundles all identity-related scopes; Directory and Groups Management is now a separate scope requiring explicit assignment in custom roles. • Directory Management and Group Management scopes have moved under 'Directory and Groups Management' — existing role assignments may need to be reviewed. • SaaS Applications and Asset Management scopes have moved under 'SaaS and Asset Management' — existing role assignments may need to be reviewed. • RADIUS Authentication has moved under Access Management — existing role assignments scoped to its previous location may need to be updated. • User Portal APIs and operations are now under the Multi-Factor Authentication scope — roles that previously controlled User Portal access may need reassignment. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2022 https://jumpcloud.com/support/release-notes-2022 Thu, 01 Oct 2026 06:06:33 GMT JumpCloud 2022 adds certificate-based RADIUS auth, TOTP for LDAP, OIDC SSO, Password Manager, Remote Assist, and a Linux Forbidden Services policy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Command After Agent Install` command type so admins can specify enrollment commands to run immediately after the JumpCloud agent is installed on new devices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a `Running` column to the commands queue to distinguish commands waiting in queue from those actively running. • Adds certificate (passwordless) based authentication to JumpCloud RADIUS, supporting any X.509-compliant certificate authority — organizations can import existing certificates for RADIUS authentication. • Adds Time-based One-time Password (TOTP) as a supported MFA factor for LDAP applications, alongside JumpCloud Protect push notifications. • Adds MSP multi-tenant homepage widget showing aggregate reports across all tenant organizations available in the last 24 hours, with bulk export as JSON or CSV. • Adds the ability to update or force-update a single macOS device from the Admin Portal, with configurable update timeframes and user deferral settings. • Adds Identity First Login two-screen flow for the User Portal and SSO applications, separating username entry from password entry as a foundation for passwordless and federation workflows. • Adds JumpCloud Case Portal to centralize support cases and ideas from all admins in a filterable, clickable list. • Adds disk encryption as a new device condition in Conditional Access Policies (FileVault on macOS, system drive encrypted on Windows, root disk encrypted on Linux). • Adds OpenID Connect (OIDC) Single Sign-On (SSO) support for OIDC-capable web applications. • Adds JumpCloud agent support for Linux Fedora 37. • Adds Create Custom Command Templates for MSP admins to save and reuse commands across tenant organizations. • Adds universal Google Chrome Browser Patch Management policy covering macOS, Windows, and Linux from a single policy. • Adds JumpCloud Password Manager with end-to-end encrypted local storage, browser extension auto-fill, secure password sharing, and password generation. • Adds JumpCloud Remote Assist for free remote desktop access on Windows and macOS devices (requires JumpCloud Agent v1.61.0 or later), with no limits on session time or session count. • Adds new macOS software management policies to delay or block upgrades to macOS Ventura. • Adds Managed Login Items policy for macOS 13 Ventura to prevent end users from disabling persistent software such as the JumpCloud Agent. • Adds RADIUS authentication with Azure AD as the identity provider, enabling RADIUS access without managing users and passwords outside Azure AD. • Adds Linux Forbidden Services policy to remove support for unnecessary service types across a Linux fleet. • Adds SentinelOne integration, enabling installation of the SentinelOne Agent on macOS, Windows, and Linux devices via JumpCloud Commands. • Adds OS Patch Management Policy Report showing which policies are applied to each device and their current compliance status. • Adds Browser Patch Management Policy Report for compliance audit evidence on device browser versions. • Adds real-time Live Chat in the Admin Portal for Premium Support customers, replacing chat on the JumpCloud Support site. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2023 https://jumpcloud.com/support/release-notes-2023 Thu, 01 Oct 2026 06:06:33 GMT JumpCloud 2023 adds passwordless Go auth, Android zero-touch enrollment, remote Background Tools, dynamic groups, and self-service device provisioning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `JumpCloud Go` browser extension for hardware-protected, phishing-resistant passwordless login using Apple Touch ID and Windows Hello on managed macOS and Windows devices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `JumpCloud Go` as the default MFA method for conditional access policies on SSO apps, with user and device verification on every application session. • Supports Android zero-touch enrollment for fully managed, dedicated, and company-owned Android devices with a work profile. • Adds Background Tools remote command line and remote file transfer capabilities, letting admins access end-user devices and transfer files without disrupting the user. • Adds Self-Service Account Provisioning, letting new users bind their account to JumpCloud-managed macOS and Windows devices directly from the login window, including a new macOS login window with wireless connectivity controls. • Adds MDM Certificate and Token Status Board to the Admin Portal and Multi-Tenant Portal homepages, showing expiry status for MDM, SSO, and AzureAD tokens and certificates with an aggregate MSP view. • Enables automation of device and user group membership via Dynamic Groups with attribute-based rules, including new `Vendor`, `Public IP Address` (device), and `Manager` (user) attributes. • Adds the `Deel` SSO Connector integration for JumpCloud. • Integrates with AWS Verified Access using JumpCloud Go, SAML, or OIDC SSO as a VPN-less solution for remote corporate resource access. • Adds admin management of Password Manager shared folder assignments and permissions from the Admin Portal, plus manual per-folder sync from the desktop application. • Enables Cloud Backup for JumpCloud Password Manager as a secure fallback to minimize data loss. • Adds ad hoc command execution on devices directly from the Multi-Tenant Portal and Admin Portal. • Adds user and device management to the Multi-Tenant Portal, including adding new users and devices, exporting lists, and bulk actions. • Supports Duo Universal Prompt for JumpCloud MFA. • Splits WebAuthn into separate `Security Keys` and `Device` credentials for enrollment, visible to both admins and users. • Enables MFA by default for all new admin accounts in the Admin Portal. • Adds Push Bombing Mitigation to JumpCloud Protect, blocking more than one push notification per resource within a sixty-second period, with admin controls in MFA Configurations and blocked events surfaced in Directory Insights. • Adds `Password Date` (last time a user's password was set) as a viewable column on the Users page in Admin Portal. • Adds user-switching between accounts during Remote Assist sessions on Windows devices. • Adds `Ctrl+Alt+Del` command shortcut from the Session Options toolbar during remote sessions. • Supports Remote Assist for Windows server initial login screens, allowing credential entry and user login. • Adds 7 new Android EMM policies for fully managed and dedicated devices including Factory Reset Protection, Kiosk Mode, and System Updates. • Adds `All Applications` and `Favorites` tabs to the Applications area of the User Portal, with application starring and a responsive search field. • Adds MSP billing visibility for committed user licenses, including available/consumed license counts and JumpCloud contract download. • Adds a new Password Manager Desktop App build for Linux (Debian/Ubuntu x86) with improved security and automatic updates. • Supports push notification approval and denial from the device lock screen in JumpCloud Protect (long-press on iOS, expand on Android). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2024 https://jumpcloud.com/support/release-notes-2024 Thu, 01 Oct 2026 06:06:33 GMT JumpCloud 2024 adds Device Monitoring & Alerting, Windows App Catalog, SaaS Management, CSP-based MDM policies, and multi-tenant MFA enforcement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `GET /systemusers?filter=department:$in:Finance | Accounting|IT` pipe-escape support — the `|` character can now be escaped with `\` inside `in` and `nin` API filter operators, enabling pipe characters within search terms.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `$lte` and `$gte` filter operators for Dynamic Groups `memberQuery` filters via the API, replacing the deprecated `$le` and `$ge` operators. • Replaces the deprecated `GET api/systemusers/reactivate/{id}` endpoint with `POST https://console.jumpcloud.com/systemusers/reactivate/{id}` accepting `{ activation_email: {email_address} }` in the request body. • Introduces JumpCloud Device Monitoring and Alerting — monitor device health (availability, software, uptime, disk, battery), policy/command/software management results, directory user addition and privilege elevation events, and custom alerts via command execution monitoring, across Windows, macOS, and Linux endpoints. • Launches the JumpCloud App Catalog for Windows with 10 pre-packaged apps (1Password, Adobe Acrobat Reader DC, Chrome, Firefox, Google Drive, OneDrive, OpenVPN, Slack, Webex, Zoom) and auto-update support. • Adds `Cmd/Ctrl + K` keyboard shortcut to the Admin Portal for fast cross-area navigation and search. • Supports BYOD enrollment of iOS/iPadOS 18+ devices via Account-Driven User Enrollment (ADUE), now in general availability. • Adds two new JumpCloud MDM policies to restrict Apple Intelligence features on iOS/iPadOS 18.1 and macOS 15.1 Sequoia devices. • Adds a new Windows MDM policy to configure Simple Certificate Enrollment Protocol (SCEP) for Windows devices. • Introduces a new Windows MDM Policy Management framework using Configuration Service Providers (CSPs), adding six new policies: Windows Wi-Fi Configuration, Windows VPN, Install Certificate, Bluetooth Configuration, Control Policy Conflict (enabled by default), and Windows Notification Service (enabled by default). • Launches SaaS Management — discovers and tracks SaaS app usage via the JumpCloud Go browser extension, integrates with existing SSO apps, supports warning/blocking access controls, and tracks licensing information. • Allows admins to manually add applications to SaaS Management for tracking, warning, and blocking even before automatic discovery. • Removes the requirement for JumpCloud Go to be enabled org-wide for unmanaged application discovery in SaaS Management — the JumpCloud Go browser extension alone is now sufficient. • Adds a `User Portal > Security > Multi-Factor Authentication` section to manage JumpCloud Go sessions on user devices. • Adds automatic session refresh for JumpCloud Go when a user logs in to or unlocks their managed device. • Adds Global MFA Requirement setting under `Account > Settings` in the Multi-Tenant Portal, enabling Billing admins to bulk enforce MFA across all MSP admins in a tenant. • Enables admins to allow users to reset passwords from the User Portal when MFA is enforced but not yet enrolled. • Ships JumpCloud Remote Assist as two separate architecture-specific packages — ARM64 for Apple Silicon and x86_64 for Intel Macs. • Adds inactivity timer to Remote Assist. • Enhances Remote Assist to automatically detect and terminate unresponsive existing agent instances on end-user devices when an admin initiates a connection. • Adds `Download Logs` and `Keyboard Shortcuts` options under Settings in the Password Manager desktop app. • Adds multi-select functionality and item sorting to the Password Manager desktop app. • Renames the 'Discover' page to 'Get Started' in the Admin Portal, featuring personalized onboarding suggestions and guided support. Breaking changes: • The `GET api/systemusers/reactivate/{id}` endpoint is deprecated and now returns a 404 error; replace it with `POST https://console.jumpcloud.com/systemusers/reactivate/{id}` with `{ activation_email: {email_address} }` in any script, automation, or integration. • The `$le` and `$ge` filter operators for Dynamic Groups `memberQuery` API filters are deprecated; API requests must use `$lte` and `$gte` instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2025 https://jumpcloud.com/support/release-notes-2025 Thu, 01 Oct 2026 06:06:33 GMT JumpCloud: Launches JumpCloud MCP Server GA, connecting compatible AI tools and code editors to JumpCloud via the Model Context Protocol. • Introduces JumpCloud Access Requests, enabling approval flows, access request management, and webhook integration with ticketing systems such as JIRA. • Adds Shadow AI Dashboard under the renamed JumpCloud AI & SaaS Management for visibility into generative AI shadow IT, adoption, usage by department, and most active users. • Releases Custom Admin Roles GA for all direct organizations, allowing admins to tailor roles based on specific responsibilities. • Introduces Service Accounts for APIs that are not tied to individual Admin accounts, improving security and reliability of integrations. • Adds `Asset Manager` role in the Admin Portal, providing dedicated access to Asset Management without granting broader admin access. • Adds file upload support to Asset Management via the `Invoice` field under Purchase Details, with support for custom fields of the File Upload type. • Adds `Disk Size` to Hardware Specifications in Asset Management for tracking device storage capacity. • Adds `Local Device Accounts` to the Asset Detail page under Device Management, showing local users on a device. • Adds cloning of existing assets in Asset Management, automatically clearing unique fields to prevent duplicates. • Adds IPA file support to the JumpCloud Private Repository for uploading and deploying iOS and iPadOS app packages. • Adds Apple Business Manager as a new service discovery method for Account-driven Enrollment in Apple MDM. • Adds source IP tracking for incoming LDAP requests for enhanced security and traceability. • Adds User Group Exclusion from JumpCloud Protect Unified MFA, allowing specific groups to use TOTP only instead of Push. • Introduces AI Commands Builder GA, enabling natural-language creation and refinement of commands for Windows, macOS, and Linux devices within the Admin Portal. • Releases three new Windows Personalization policies: Taskbar Customization, Screen Saver Configuration, and Desktop and Lock Screen Settings. • Adds faster reconnect for EAP connections using a secure cached session credential to skip the full security handshake on reconnect. • Expands Directory Insights `Application Name` filter into `Application Name`, `Application Display Name`, and `Application Display Label`, and `Resource Name` into `Resource Name`, `Resource Display Name`, and `Resource Display Label`. • Extends the Customer Portal with sortable columns for `Last Modified Date`, `Account`, and `Requester`, plus attachment upload and ticket editing on the case page. • Adds MTP admin support in the Customer Portal to access, view, and create support cases for all tenant organizations. • Launches SaaS License Management GA, automating license tracking for supported SaaS applications with connectors for cost optimization. Breaking changes: • LDAP TLS no longer accepts connections using CBC-mode or SHA-1/SHA-256 integrity cipher suites (including RSA and ECDHE key exchange variants); only five GCM-based suites are now permitted. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud https://jumpcloud.com/support/release-notes-2026 https://jumpcloud.com/support/release-notes-2026 Thu, 01 Oct 2026 06:06:33 GMT JumpCloud's October 2026 release adds MCP Server for Users, Custom Risk Policies, a Patch Management Dashboard, AI knowledge-base uploads, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `MCP Server for Users` (Model Context Protocol) so JumpCloud users can connect AI clients to User Portal capabilities via OAuth sessions; admins enable it at `Settings > JumpCloud AI` and can set automatic session expiration or revoke sessions manually.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Custom Risk Policies` under Access Risk to tailor risk detection for Admin Portal, User Portal, device, and SSO application logins — choose monitored risk factors, adjust score weights, set policy precedence, and scope policies to specific user groups or SSO applications. • Adds `App Settings Privacy` policies for Apple MDM: a user-level `macOS App Settings Privacy` policy (macOS 27+, supervised Macs) and a device-level `iOS and iPadOS App Settings Privacy` policy (iOS/iPadOS 27+) to recommend privacy permission defaults for Accessibility, Bluetooth, Camera, Dictation, Local Network, Location, Location Accuracy, and Microphone. • Adds `User Portal Folders` so end users can organise assigned applications into private personal folders on the `All Applications` page; folders are invisible to other users and admins. • Adds `Asset Visibility` and `Asset Acknowledgement` in the User Portal, enabled at `Device Management > Asset Management > Settings and Fields > General Settings`; acknowledgement requests and responses are recorded in `Asset History` with email notifications. • Adds `Knowledge Base Uploads` for AI Assistant: upload PDF, TXT, DOCX, and MD files (up to 10 MB each, 25 files per org) into a private org-scoped knowledge base; responses citing uploaded docs attribute the source document. • Adds Device Patch Report (Windows) in JumpCloud Reports, showing per-device Installed, Pending, and Failed KB status; exportable as CSV with up to 500-row portal preview. • Adds new Android policies for Display Settings, Autofill, Work Account authentication, Default App and Intent Handling, and enhanced Bluetooth Restrictions (including outbound file sharing and personal-profile Bluetooth controls on company-owned devices). • Adds automatic device registration for `JumpCloud Go` on managed Windows, macOS, and Linux devices; admins control eligibility via device exclusion groups with fallback to manual registration. • Adds an `AI Gateway Dashboard` tab with org-wide MCP server usage metrics, tool call volume, error rates, trend charts, and per-server drill-down. • Adds configurable `client authentication type` for agent OAuth credentials (`Client secret basic` or `Client secret post`) on an agent's `Authentication` tab. • Enables updating the binary of an existing custom application in the Private Repository via `Update Version` on the application's `Details` tab, including exit-code confirmation for Windows EXE updates. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/jumpcloud