Overview
The JumpCloud integration enables ThreatAware to collect data from JumpCloud, providing visibility into your security posture and cyber asset management.Connection Method: API
Setup Time: 15-30 minutes
Access Required: Administrator account with API permissions
Use cases
Device & Asset Tracking
Monitor devices and assets managed by JumpCloud
Security Compliance
Track security posture and compliance status
User & Access Management
Identify users, roles, and access patterns
Threat Detection
Detect threats and vulnerabilities in real-time
Setup instructions
1
Log in to ThreatAware
Log in to the ThreatAware dashboard and navigate to Settings → Integrations.
2
Search for JumpCloud
Use the search bar to find “Jumpcloud.”
3
Click Connect
Click “Connect,” and a pop-up window will appear.
4
Log in to JumpCloud
Log in to your JumpCloud Admin Console.
5
Create API Admin Account
It is recommended to create a new Admin Account specifically for API use, as API Keys are tied to individual Admin Accounts.
6
Select Admin Account
Either log in as the newly created Admin Account or use an existing Admin Account.
7
Access API Settings
Click on your profile icon in the top right corner and select API Settings from the drop-down menu.
8
Copy API Key
Copy the displayed API Key.
9
Paste API Key
Paste the copied API Key into the relevant field in ThreatAware.
10
Authorize Connection
Click the “Authorize” button.
Data collected
The JumpCloud integration provides:- Device and asset information
- Security compliance and posture data
- User and access information
- System performance metrics
- Configuration and policy information
Required credentials
To set up the JumpCloud integration, you will need:- API Key or Token: Obtain from JumpCloud admin console
- API Secret or Client Secret: Keep this secure
- API Endpoint URL: The JumpCloud API base URL
- Service Account: Admin account or dedicated integration user
- Service Account Password: Associated credentials
Verification and testing
After setup, verify the integration is working correctly:-
Check Integration Status
- Navigate to Settings → Integrations in ThreatAware
- Confirm the integration shows Active status
- Check the last sync timestamp
-
Verify Data Collection
- Wait up to 60 minutes for the initial data collection
- Verify data appears in device details or dashboards
-
Test Queries
- Create a test query to filter data from this integration
- Verify results match your expectations
Troubleshooting
Connection Failed
Connection Failed
Symptoms: Integration fails to connect or shows errorSolutions:
- Verify all credentials are correct and copied without extra spaces
- Ensure the API endpoint URL is accessible from ThreatAware
- Check firewall rules allow outbound HTTPS (port 443) to the API endpoint
- Confirm API credentials have not expired
- Verify the service account has necessary permissions
Authentication Failed
Authentication Failed
Symptoms: Invalid credentials errorSolutions:
- Double-check the API key and secret are correct
- Verify the API credentials have not been revoked
- Ensure you are using the correct API version
- Check if IP whitelisting is required
- Review admin logs for authentication failures
No Data Appearing
No Data Appearing
Symptoms: Integration active but no data visibleSolutions:
- Wait 60 minutes for initial synchronization
- Verify API credentials have read permissions
- Check the service account can access required data
- Ensure data exists in the source system
- Review ThreatAware integration logs
Incomplete or Partial Data
Incomplete or Partial Data
Symptoms: Only some data is being collectedSolutions:
- Verify the service account permissions for all resources
- Check for API rate limit issues
- Review source system for data availability
- Contact ThreatAware support if the issue persists