JumpCloud Integration

Connect JumpCloud with Sprinto to automate device compliance checks, user access monitoring, and evidence collection using API key authentication.

The JumpCloud integration enables Sprinto to automatically collect device and user data for compliance monitoring across your organisation.

This is a dual-purpose integration that supports:

• Device Management (MDM): Tracks device inventory, encryption status, OS versions, and compliance signals

• Identity & Access Management (IAM): Syncs users, groups, and SSO application access for audit visibility

Sprinto uses this integration to continuously evaluate device posture and access controls, ensuring your organisation meets compliance requirements with minimal manual effort.

---

How it works

Sprinto connects to JumpCloud using an API key and periodically syncs device and user data.

Once connected:

1. Sprinto validates the API key using the JumpCloud organisation endpoint

2. Device inventory and system groups are fetched

3. User and access data are mapped to devices and applications

4. Compliance signals (encryption, OS version, policies, etc.) are evaluated

5. Evidence is automatically generated and mapped to controls

Sync behaviour:

• Initial sync starts immediately after connection.

• Subsequent syncs run periodically.

• Devices without proper group assignments may not be evaluated correctly.

---

Features

• Automated device inventory sync across Windows, macOS, and Linux.

• Continuous monitoring of encryption, OS version, and device posture.

• Mapping of users to devices for ownership tracking.

• Sync of user groups and SSO applications for access visibility.

• Automated evidence collection for compliance controls.

• Detection of installed applications for security validation.

---

Prerequisites

Before connecting JumpCloud to Sprinto, ensure the following:

• You have administrator access to your JumpCloud organisation.

• You have access to generate an API key.

• All devices are assigned to device groups in JumpCloud.

• Devices belong to supported platforms:

  • Windows

  • macOS

  • Linux

---

Permissions required

Sprinto requires read-only access to:

• User information (name, email)

• Devices and device configurations

• System and user groups

• SSO applications and mappings

Ensure the API key has sufficient permissions to access both devices and directory data.

---

Get your JumpCloud API key

1. Log in to the JumpCloud Admin Console.

2. Click your profile in the bottom-left corner.

3. Select My API Key.

1. Copy the API key shown in the modal.

2. You can also click Generate New API Key to generate a new key.

Note

1. Store the API key securely.

2. Generating a new key invalidates the previous one.

---

Connect JumpCloud to Sprinto

1. Log in to the Sprinto dashboard.

2. Navigate to Settings → Integrations.

3. Search for JumpCloud in the All tab.

4. Click Connect.

1. In the first drawer:

   1. Review permissions and data accessed by Sprinto.

   2. Click Next.

1. In the setup drawer:

   1. Enter your JumpCloud API key.

   2. Click Connect to JumpCloud.

Once the API key is validated, the integration is successfully established.

---

What data does Sprinto collect?

Device (MDM) data

Data Type	Purpose
Device inventory	Track all managed devices
OS and version	Compliance validation
Encryption status	Verify disk encryption
System groups	Categorise devices
Installed applications	Detect antivirus and software posture
User-device mapping	Identify ownership

Identity & Access (IAM) data

Data Type	Purpose
Users	Identity mapping
User groups	Access control structure
SSO applications	Application inventory
Group memberships	Permission auditing

---

Post-connection configuration

To ensure accurate compliance evaluation:

1. Navigate to JumpCloud device groups:

   • Device Management → Device Groups

2. Create or verify groups for:

   • Windows devices

   • macOS devices

   • Linux devices

3. Ensure:

   • All devices are assigned to appropriate groups.

   • No devices remain ungrouped.

Important: Devices not assigned to groups may not be included in compliance checks.

---

Error handling and troubleshooting

Common issues and resolutions

Issue	Cause	Resolution
Invalid API key	Incorrect or expired key	Generate a new API key and reconnect
401 Unauthorized	Authentication failure	Verify API key format
403 Forbidden	Insufficient permissions	Ensure API key has device access
Devices not syncing	Missing group assignments	Assign devices to JumpCloud groups
Temporary failures	Network/API issues	Retry after some time

---

Technical details

Authentication

• Type: API Key

• Header: x-api-key: {apiKey}

• Content-Type: application/json

Connection validation

• Endpoint: GET /api/organizations

• Purpose: Validate API key and organisation access.

Data sync coverage

• 15+ API endpoints across:

  • Device management (v1, v2 APIs)

  • Identity and access data.

---

Additional notes

• JumpCloud is a pre-configured provider in Sprinto.

• Integration is available but remains inactive until configured.

• Only supported platforms are synced (Windows, macOS, Linux).

• iPads and unsupported devices are excluded automatically.

• API key is stored as provided and must be managed securely.

---

Support

Please contact Sprinto Support If you have any queries related to the integration or need any assistance.