Users: Configure Mobile Device Trust on Apple and Android Devices

JumpCloud Go™ for Mobile lets you access the JumpCloud User Portal and SSO apps securely and seamlessly from your mobile device. After registering your device with JumpCloud Protect, you can verify your identity using biometrics without entering a password. Learn how to enroll your mobile device in Device Management and use JumpCloud Protect to access your company’s protected resources.

Prerequisites:

• Your device is enrolled in JumpCloud Device Management:
  • For a company-owned device, you’ll need to work with your admin to enroll it.
    • For Apple devices, see Add Company-Owned iOS Devices to MDM.
    • For Android devices, see Enrolling Company-Owned Android Devices.
  • For a personal or BYOD device, you can enroll it yourself. See the following section Enrolling a Personal Device in Device Management to learn more.
• Your admin deploys the JumpCloud Protect app to your device. If you don’t see it on your device, contact your admin. See Get Started: Mobile Device Trust to learn more.
• Your device meets certain security and compliance requirements. For example, your device must be running a supported OS:
  • Apple:
    • iOS 14+
    • iPadOS 14+
  • Android:
    • Android 5.0+
    • Google Play Services must be enabled on your device.
• Biometrics are configured on your device:
  • For Apple devices, see Apple’s support documentation to learn more:
    • Use Face ID on your iPhone or iPad Pro
    • Use Touch ID on iPhone or iPad
  • For Android devices, see Google’s support documentation to learn more:
    • How to unlock your Pixel phone with your fingerprint
    • Unlock your Pixel phone with your face 

Considerations:

• You can only access resources that are assigned by your admin. If you don’t see a particular SSO app available in the User Portal, contact your admin.

Enrolling a Personal Device in Device Management 

Before you can use JumpCloud Go for Mobile, you first need to enroll your device in JumpCloud Device Management. Learn how to enroll a personal mobile Android or iOS device in JumpCloud MDM.

Apple Device

You can enroll your Apple device in Apple MDM directly from the User Portal. See the following tutorial for a walkthrough. For detailed instructions, see Users: Enroll Your Personal iOS Device.

Tutorial: Adding a Personal iOS Device

Android Device

You can enroll your Android device in Android EMM directly from the User Portal. See the following tutorial for a walkthrough of the process. For detailed instructions, see Users: Enroll Your Personal Android Device.

Tutorial: Adding an Employee-Owned Android Device

Configuring the JumpCloud Protect App

After enrolling your device in Device Management, your admin needs to deploy the JumpCloud Protect app to your device. If you don’t see the app on your device home screen or app library, contact your admin. 

Configuring the JumpCloud Protect app varies depending your device and enrollment type:

• For Android devices:
  • When your device is enrolled in Android EMM, your admin will either deploy the JumpCloud Protect app, or it will be available in the Managed Google Play Store (or the Work Profile side of the device).
• For Apple devices:
  • Automated Device Enrollment (Company-owned): JumpCloud MDM can silently push a managed instance of JumpCloud Protect or silently take over a personally installed version of JumpCloud Protect.
  • Profile-driven Device Enrollment (Company-owned): JumpCloud MDM can push a managed instance of JumpCloud Protect or take over a personally installed version of JumpCloud Protect, but will prompt you to approve.
  • User Enrollment (BYOD): JumpCloud MDM can push a managed instance of JumpCloud Protect and prompt you to approve. However, if you already have a personally installed version of JumpCloud Protect, you will need to decide whether to remove it and have the admin push it or you can use the existing JumpCloud Protect app.

Registering Your Device with JumpCloud Go

Use the managed JumpCloud Protect app to register your device with JumpCloud Go and create a secure token on your device for accessing protected company resources. 

1. In your device browser, go to the JumpCloud User Portal.
2. In the Email field, enter your company email address and tap Continue.

3. The JumpCloud Passwordless Login automatically appears.
   • (On Apple devices) At the popup for “JumpCloud Protect” wants to use “jumpcloud.com” to Sign In, select Continue.
4. The User Login page appears. In the Email field, enter your company email address and select Continue.
5. In the Password field, enter your password and select Log in.
   • If your organization requires multi-factor authentication (MFA), approve the authentication request with your configured authentication method. See MFA for Users to learn more.
6. The Passwordless Login screen appears and redirects you to JumpCloud Protect to complete the registration process.
   1. (On Apple devices) Tap the JumpCloud Protect notification to go to the Protect app and complete registration. When complete, JumpCloud Protect app displays this message: Configured. You can return to the previous app.
   2. (On Apple devices) Tap the top left of the screen to return to the browser and the User Portal.
      
7. Your device is registered with JumpCloud Go. When you return to the User Portal, use JumpCloud Go to verify your identity with biometrics.

Apple Tutorial

Review the following tutorial for a guided walkthrough of the registration process on Apple iOS and iPadOS devices.

Android Tutorial

Review the following tutorial for a guided walkthrough of the registration process on Android devices.

Verifying Your Identity with JumpCloud Go

Registering your mobile device with JumpCloud Go enables seamless access to any of your protected resources. When you access the User Portal or a protected resource, JumpCloud Protect automatically appears and uses JumpCloud Go to verify your identity with device biometrics (fingerprint or FaceID for example). You don’t need to enter any additional credentials.

Checking JumpCloud Go in the Protect App

You can check your JumpCloud Go registration status, or disable it as an authentication method within the JumpCloud Protect app:

1. On your mobile device, open the JumpCloud Protect app and select the Accounts tab.
2. Locate the JumpCloud Go entry in the list and tap to select it. 
3. (Optional) You can view more details on the token, or delete it if you need to reregister. 
4. (Optional) In the bottom right of the Protect app, go to the More tab and select Settings. Under JumpCloud Go, you can toggle JumpCloud Go to disable it.