{"id":59543,"date":"2022-11-03T17:07:28","date_gmt":"2022-11-03T09:07:28","guid":{"rendered":"https:\/\/version-2.com.sg\/?p=59543"},"modified":"2022-12-02T18:13:35","modified_gmt":"2022-12-02T10:13:35","slug":"comparing-jumpcloud-vs-azure-ad-and-intune","status":"publish","type":"post","link":"https:\/\/version-2.com\/en\/2022\/11\/comparing-jumpcloud-vs-azure-ad-and-intune\/","title":{"rendered":"Comparing JumpCloud vs Azure AD and Intune"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Microsoft is making a steady push in identity and mobile device management with an expanding array of cloud services. Many organizations, especially managed service providers (MSPs), are considering Azure Active Directory<\/a> (AAD) with Intune\u2122 for access control and unified endpoint management. It\u2019s primarily focused on supporting the Microsoft ecosystem with add-on options to support other platforms and increase security for enterprises. In order to integrate into existing on-premises Windows domains, however, complex connectors are required.\u00a0<\/p>

JumpCloud takes a different approach through its open directory platform<\/a>, which can consume identities from multiple providers, through several protocols, to enable frictionless access into different resources. The platform is engineered to follow Zero Trust<\/a> security principles and automate the user identity lifecycle. The open directory makes it possible for small and medium-sized enterprises (SMEs) and Managed Service Providers (MSPs) alike to provision the best resources, from any vendor, to get work done. It also provides add-ons for deeper system management and security considerations. Microsoft and JumpCloud both provide cloud-based IT management tools for identity management and device management. This article examines how they compare and the best fit for each platform.<\/p>

What Is Azure AD?<\/h2>

AAD was created for the express purpose of extending Microsoft\u2019s presence into the cloud. It connects users with Microsoft 365 services, providing a simpler alternative to Active Directory Federation Services (ADFS<\/a>) for single sign-on (SSO). There\u2019s similar nomenclature, but it doesn\u2019t replace all the features of Active Directory and lacks support for key authentication protocols including LDAP and RADIUS. It provides a common identity for Azure, Intune, M365, and other Microsoft cloud products, which permits SSO and multi-factor authentication (MFA) within the Microsoft ecosystem. Cross-domain SSO and MFA are gated behind paid tiers of AAD, once a defined number of integrations per user is surpassed.<\/p>

Microsoft has a structured gated licensing model with trial subscriptions and a free tier of AAD<\/a> with some restrictions. For example, there are limits on stored objects and the number of apps a single user can access with SSO and group management with role-based access control (RBAC) costs extra. Microsoft also charges for MFA for external identities, per authentication. AAD\u2019s features, which include a few time-limited trial services when users sign up, are listed on its website.<\/p>

It also serves as Microsoft\u2019s approach to a multi-tiered portfolio of identity, compliance, device management, and security products. The permutations of accompanying cloud products from Microsoft and challenges of migrating from Active Directory to the cloud have given rise to a cottage industry<\/a> of consultants. This is due to the breadth of configurations, and resulting complexity, that many enterprise use cases require. However, some organizations may benefit from this approach. Integrations with other paid Microsoft services are possible such as Microsoft Intune Premium Suite, Microsoft 365, automations for management tasks, and reuse of ADMX templates<\/a> from Windows 10\/11.<\/p>

What Is Intune?<\/h2>

Microsoft\u2019s latest offering is Microsoft Intune Premium Suite<\/a>. It functions as a mobile device management<\/a> (MDM) solution to administer features and settings for iOS\u00ae<\/sup>\/iPadOS\u00ae<\/sup>, Android\u00ae<\/sup>, and Windows. While it extends to macOS and Linux, it\u2019s historically been less focused on non-Windows platforms. Microsoft is updating its services and is increasing what\u2019s possible on other platforms. For instance, Intune supports custom\/templated profiles for macOS, compliance policies, shell scripts, Apple Business Manager (ABM), and user\/device enrollment options. Linux support has rolled out slowly and is focusing on compliance policies. Microsoft Edge is obligatory<\/a> to utilize some of its features, such as conditional access policies for privileged users.<\/p>

However, Intune bolsters Microsoft products such as Edge and Configuration Manager as first-class citizens. Windows administrators will be familiar with aspects of how it works, such as ADMX templates. Intune is most robust when it is used to manage Windows systems that are hybrid AD-joined, in combination with other services and security solutions. Separate license requirements and costs may impact what services can integrate with Intune.<\/p>

What is Configuration Manager?<\/h3>

The following provides a quick primer on Configuration Manager:<\/p>