JumpCloud® delivers a unified open directory platform used to securely manage identities, devices, and access across an organization. With JumpCloud, IT teams and MSPs enable users to work securely from anywhere and manage their Windows, Apple, Linux, and Android devices from a single platform.
$11
per month per user
Kandji
Score 5.2 out of 10
Mid-Size Companies (51-1,000 employees)
Kandji is an Apple device management software solution for macOS, iOS, iPadOS, and tvOS, from the company of the same name in San Diego.
Both MDMs have issues with employee's laptop passwords and being able to reset those password. We switched to Kandji because laptop PWs were connected to Gmail PWs. However, there were continous "password sync" errors that it ended up being a huge headache for everyone.
With Intune, they aren’t friendly with Macs. We had to add each app individually and constantly update the packages for updates. Even when we do everything right, it still doesn’t work all the time.
JumpCloud is least suited in situations where you have few devices, but lots of users. JumpCloud heavily focuses on the "One-User-One-Device" type of use, and does lack some of the features things like Active Directory is better suited for when having multiple users accessing one machine. Their Powershell APIs are fantastic and getting only more powerful. Lots of features are hidden behind these APIs, so admins not as familiar with Powershell would have more issues leveraging these tools. BYOD deployments are amazing, especially for macOS devices that are using Apple Business Manager and can leverage Zero Touch deployments. It is especially good at handling mixed systems, whereas other options, such as Jamf, are really suiting only for macOS, or Intune is more suited for Windows; JumpCloud managed to handle both systems well.
Kandji would be excellent for a company that has Mac fleets and is currently using Intune or Jamf as their MDM. Kandji is cheaper than Jamf and way easy to configure than Intune.
User Management - The ability to control our users and set password/polices is made easy in the JC console
Device Management - Using JC each user is assigned to their own device with only the rights to do their job - When elevated rights are required, this is done simply via the JC console for the period of time required
SSO - Using JC's SAML SSO integrations we are building out our SSO offering and this is making for a much simpler daily user experience
SSO via OpenID - Opening up their SSO from just SAML to including OpenID (OAuth) would allow us to make more use of the service and to also incorporate it into some internal testing suites
Time Limited User Elevation - The ability to time limit a users elevation of privileges would be a great addition
Extending device management to include LPA - Least Privilege Access is becoming a bigger ask from our external auditors - Being able to do this via JC would be amazing
It's simple. I like how JumpCloud keeps things simple. Similar to Apple's ecosystem, they give you what you want with some extra features and bells and whistles but it doesn't take a large instruction manual to use it. They have the support system and KB articles to back up their product and learn about a feature and how to implement it
Switching from our old MDM to Kandji: "We'll set you right up with an integration specialist" and it'll be "so easy." Greatly incorrect. The change took months and was a disaster at best. So many things I had to figure out that they never mentioned, or I had to keep going back to them to get more information. "Oh, we forgot to mention that!" - said about a dozen times. Also, I had to go to our former MDM to ask them how to do it because "Kandji can only help on the Kandji side of things - not the other MDM side." Well yes, but then don't make it sound like you can and will do that part in the first place!
We have their premium support. Not only is the support great, but our SAM / Account manager directs any questions or updates to the proper channels and gets us the needed info and solution quickly. Due to this, we find JumpCloud to exceed our expectations and puts us at ease that our Foundation Tech Solution is VERY reliable.
They promised us we could add devices as needed. I even had that written in an email. However, they rescinded that promise and required us to add devices in buckets of 50. That means, since we had 55 users, we had to pay for 100 licenses.
Password issues were made much worse by using Kandji instead of our old MDM (Hexnode).
Overall, Kandji created major headaches with laptop instead of improving.
