JumpCloud

But finally, we are in the point where I think, and I'm happy to state this, we've stated it to customers.

So yes, JumpCloud's an IDP.

We don't support platform SSO because I think what JumpCloud has had, some of which are based upon patents that have my name in it, so I'm obviously biased in this, has been hardware-backed tokens that I thought worked better than platform SSO until GoldenGate.

So with GoldenGate, because we've been talking a lot about tap to log in, which is maybe sexy, kind of cool, but probably not going to be used by 98% of the people listening to this podcast.

At least unless we can convince you it's really exciting.

no matter how much Apple pushes and less Google or the other IDPs they use for it and support it, getting rid of a login window plugin would mean that we'd lose that support, which means people couldn't log in to the cloud for that.

The other thing is when you have the flows where you're authenticating before the user is set up, that requires an MDM integration.

And so a lot of the reasons you're seeing the people doing this are the providers that are both MDM and IDP, like JumpCloud and...

Start with what organizations can see.

JumpCloud, which sells identity management, surveyed 250 IT leaders in the US and UK.

59% of organizations using AI agents haven't fully brought them under identity and access policies.

72% report a significant gap between what their AI systems are permitted to access and what they can verify those systems actually accessed.

ClientVPN now verifies device posture before granting access.

It integrates with CrowdStrike, Jamf, or JumpCloud to check encryption, compliance scores, and risk level using Cedar policies you can validate with a built-in test tool.

Sessions are continuously re-evaluated and dropped if a device falls out of compliance, and a monitoring-only mode lets you test first at no extra cost.

Wildcard matching comes to Network Firewall's container attribute filters for EKS and ECS.

My IDP is Google Workspace because that's all we need right now.

And I don't see a strong need to drop down, you know, drop a huge chunk of change on either JumpCloud or Okta.

I mean, that's going to be something that we revisit as part of our, you know, process for the next year.

But like,

Correct.

Because at least in the United States, you know, one of the key cyber insurance requirements, you know, in order to even get a cyber insurance policy, as you know, through your days at JumpCloud is obviously you have to have MFA turned on, right? MFA everywhere, right? But aside from MFA being turned on everywhere, you also have to make sure that your users are trained, you know, getting a security awareness training and a phishing simulation, Most cyber insurance organizations call for it being done at least once annually.

I'm seeing a lot of MSPs bump that down to a monthly, you know, at least doing some sort of micro learning session at least once a month.

It doesn't have to be a full blown one hour security awareness training course once a month, but at least a quick one to five minute quick course once a month, along with one or two phishing simulations going out monthly is really going to keep, you know, those clients hygiene good.

So that's kind of cool synergy there.

So another customer that jumped out to me was JumpCloud, pun intended.

But I think my last role before going all in on this, I was at AWS Managed Service Provider, and I think we use JumpCloud for our own business.

So that's why it rings a bell.

But you guys have been doing some good things for them.

So what's the latest with JumpCloud?

Yeah, I mean, JumpCloud, when you think about...

The persona that they're selling to, they're selling to cybersecurity professionals.