Ctrlk
TD Website
For the complete documentation index, see llms.txt. This page is also available as Markdown.

JumpCloud

By integrating JumpCloud with ThreatDefence via JumpCloud's API and event logging capabilities, you can stream identity, access, and device-related events directly into ThreatDefence for comprehensive visibility and centralized security monitoring.

This integration enables ThreatDefence to track:

  • User authentication

  • Directory changes

  • Policy enforcement

  • Endpoint activity

By correlating this with other security data, ThreatDefence supports Zero Trust access control, enhances threat detection, and accelerates incident response.

Before you begin:

  • Only an admin with the Billing role can enable API access and generate an API key. API access is disabled for admins by default — if you see "You don't have permission to view or generate an API Key", ask a Billing admin to enable it for you.

  • The API key inherits the permissions of the admin who created it, so generate it from an account that can see the organisations and data you want ThreatDefence to collect.

  • If your account is managed through the Multi-Tenant Portal (MTP) or your admin has access to more than one JumpCloud organisation, also collect the Organization ID (see Step 2).

Step 1. Generate API Key

  1. On your JumpCloud dashboard, click your account initials in the top-right corner.

  2. Navigate to My API Key.

  3. Select Generate New API Key and store the value in a secure location.

The API key is displayed only once at creation, and generating a new key revokes all previous keys - any other integration using the old key will stop working. New keys default to a 90-day expiry, so note the expiry date and plan to rotate the key in ThreatDefence before it lapses.

Step 2. Retrieve your Organization ID (optional)

The Organization ID tells the JumpCloud API which organisation's data to return. It is sent as the x-org-id header on each request.

  • Single organisation — leave this blank. The API key already resolves to your only organisation, and no Organization ID is needed.

  • Multiple organisations (MSP / Multi-Tenant Portal) — provide the Organization ID of the tenant you want ThreatDefence to collect from. Without it, requests made with a key that can see several organisations are ambiguous and may not return the expected data.

To find it:

  1. In the JumpCloud Admin Portal, go to Settings → Organization Profile → General.

  2. Locate Organization ID, click the eye icon to reveal the full value, then click the copy icon to copy it.

Reference: Settings in the Admin Portal

Onboarding the integration

Please follow the Managing Integrations instructions and onboard the integration. The credentials saved above are required in this process.

If you encounter difficulties with onboarding, please email the following credentials to support@threatdefence.com

  • API Key

  • Organization ID — only if your admin account has access to more than one JumpCloud organisation

PreviousOkta
NextDuo Security

Last updated