{"id":94764,"date":"2023-10-12T15:59:31","date_gmt":"2023-10-12T19:59:31","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=94764"},"modified":"2024-07-19T16:01:41","modified_gmt":"2024-07-19T20:01:41","slug":"get-started-self-service-account-provisioning","status":"publish","type":"support","link":"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning","title":{"rendered":"Provision New Users on Device Login"},"content":{"rendered":"\n<p><strong>Self-Service Account Provisioning<\/strong> lets users bind their account to a JumpCloud-managed macOS or Windows device directly from the login window. This streamlines the onboarding experience for users and enables light-touch device configuration for admins.&nbsp;&nbsp;<\/p>\n\n\n\n<p>When enabled, users see <strong>Sign in with JumpCloud <\/strong>at the device login window and enter their existing JumpCloud user credentials to begin the user-led provisioning process.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p><strong>Sign in with JumpCloud<\/strong> is only present on devices that have no current JumpCloud user associations.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>Understanding the Benefits<\/strong>:<\/p>\n\n\n\n<ul>\n<li>Manage wireless connectivity from the improved macOS device login window.&nbsp;<\/li>\n\n\n\n<li>Save time and IT resources spent manually associating users to devices with a light-touch device onboarding process for admins.<\/li>\n\n\n\n<li>Simplify the onboarding experience and let users start working quickly from their JumpCloud-managed account on their JumpCloud-managed device.<\/li>\n\n\n\n<li>Enable login of federated user identities to JumpCloud-managed devices. See <a href=\"https:\/\/jumpcloud.com\/support\/get-started-federated-authentication\">Get Started: Federated Authentication<\/a>.<\/li>\n<\/ul>\n\n\n\n<p><strong>Prerequisites:<\/strong><\/p>\n\n\n\n<ul>\n<li>macOS and Windows devices that meet <a href=\"https:\/\/jumpcloud.com\/support\/agent-compatibility-system-requirements-and-impacts\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud\u2019s Agent Compatibility and System Requirements<\/a>.\n<ul>\n<li>Windows Home editions aren&#8217;t supported.<\/li>\n\n\n\n<li>Windows Server editions aren&#8217;t supported.<\/li>\n\n\n\n<li>Windows ARM editions are not supported. <strong>Sign in with JumpCloud <\/strong>won&#8217;t appear on the login window of these devices.<\/li>\n\n\n\n<li>Active Directory (AD) and Entra ID joined devices are not supported.&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>The JumpCloud agent has to be installed and running on macOS and Windows devices. See <a href=\"https:\/\/jumpcloud.com\/support\/install-the-mac-agent\" target=\"_blank\" rel=\"noreferrer noopener\">Install the Mac Agent<\/a> and <a href=\"https:\/\/jumpcloud.com\/support\/install-the-windows-agent\" target=\"_blank\" rel=\"noreferrer noopener\">Install the Windows Agent<\/a>.&nbsp;<\/li>\n\n\n\n<li>The device cannot have an existing JumpCloud-bound user account.<\/li>\n<\/ul>\n\n\n\n<p><strong>Considerations<\/strong><\/p>\n\n\n\n<ul>\n<li>Self-Service Account Provisioning can only add an existing JumpCloud user to a device that doesn&#8217;t have any JumpCloud user associations. \n<ul>\n<li>Takeover of an existing local account on a device isn&#8217;t supported. Device association will fail if the user signing in has a JumpCloud username that matches an existing local account.&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>This feature doesn&#8217;t support creating a new JumpCloud user at the device login window. The JumpCloud user must exist within the org and have credentials assigned. <\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-enabling-self-service-account-provisioning-admin\">Enabling Self-Service Account Provisioning (Admin)<\/h2>\n\n\n\n<p><strong>To enable Self-Service Account Provisioning for your org:&nbsp;<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\/admin\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>DEVICE MANAGEMENT &gt; Devices &gt; Device Settings<\/strong>.<\/li>\n\n\n\n<li>Under <strong>Self-Service Account Provisioning<\/strong>:\n<ol class=\"is-lower-alpha\">\n<li>Click to toggle <strong>macOS<\/strong> to <strong>On<\/strong> to enable Self-Service Account Provisioning on macOS devices.<\/li>\n\n\n\n<li>Click to toggle <strong>Windows<\/strong> to <strong>On<\/strong> to enable Self-Service Account Provisioning on Windows devices.<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>Under <strong>User Permission-level<\/strong>, choose the permissions assigned to a user when they\u2019re provisioned on the device:\n<ol class=\"is-lower-alpha\">\n<li>Choose <strong>Administrator<\/strong> to assign administrator\/sudo privileges to the user.&nbsp;&nbsp;&nbsp;<\/li>\n\n\n\n<li>Choose <strong>Standard <\/strong>to assign non-administrative or non-sudo privileges to the user.&nbsp;<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<ul>\n<li>See <a href=\"https:\/\/jumpcloud.com\/support\/set-admin-sudo-permissions\" target=\"_blank\" rel=\"noreferrer noopener\">Set Admin\/Sudo Permissions<\/a> to learn more about administrator\/sudo privileges on devices.&nbsp;<\/li>\n\n\n\n<li>By default, new users added to devices have their JumpCloud password synced to their device. You can disable <strong>Password Synchronization<\/strong> to have users enter a local password to log into their device instead. See <a href=\"https:\/\/jumpcloud.com\/support\/device-password-sync\" target=\"_blank\" rel=\"noreferrer noopener\">Device Password Sync<\/a> to learn more. <\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n<div class=\"wp-block-image is-resized\">\n<figure class=\"alignleft size-large\"><img decoding=\"async\" width=\"974\" height=\"1024\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-974x1024.jpg\" alt=\"\" class=\"wp-image-106925\" srcset=\"https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-974x1024.jpg 974w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-285x300.jpg 285w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-768x807.jpg 768w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-1461x1536.jpg 1461w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-1948x2048.jpg 1948w\" sizes=\"(max-width: 974px) 100vw, 974px\" \/><\/figure><\/div>\n\n\n<h2 class=\"wp-block-heading\" id=\"h-exploring-the-macos-login-window\">Exploring the macOS Login Window<\/h2>\n\n\n\n<p>Enabling Self-Service Account Provisioning deploys the updated login window to macOS devices. There are several benefits over the standard macOS login window:<\/p>\n\n\n\n<ol>\n<li>Manage WiFi connectivity from the login window by clicking <strong>Wireless<\/strong>.&nbsp;<\/li>\n\n\n\n<li><strong>Refresh<\/strong> the login window to update any user association changes made by admins.&nbsp;<\/li>\n\n\n\n<li>View internet connectivity status at a glance with the red or green indicator in the top right menu bar.&nbsp;<\/li>\n\n\n\n<li>Review device health and diagnostic details by clicking the (i) in the top right menu bar for System Information.<\/li>\n<\/ol>\n\n\n<div class=\"wp-block-image is-resized\">\n<figure class=\"alignleft size-large\"><img decoding=\"async\" width=\"1024\" height=\"819\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/macos_login_window_arrows-1024x819.jpg\" alt=\"\" class=\"wp-image-99378\" srcset=\"https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/macos_login_window_arrows-1024x819.jpg 1024w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/macos_login_window_arrows-300x240.jpg 300w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/macos_login_window_arrows-768x614.jpg 768w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/macos_login_window_arrows.jpg 1284w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n\n<h2 class=\"wp-block-heading\" id=\"h-using-self-service-account-provisioning-user\">Using Self-Service Account Provisioning (User)<\/h2>\n\n\n\n<p>When your admin enables the feature, the <strong>Sign in with JumpCloud<\/strong> button appears on your macOS or Windows device login window. The login process will differ slightly depending on the OS of your device.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-signing-in-on-a-macos-device-nbsp\">Signing in on a macOS Device&nbsp;<\/h3>\n\n\n\n<p><strong>To use Sign In with JumpCloud on a macOS device<\/strong>:<\/p>\n\n\n\n<ol>\n<li>In the macOS menu bar at the top right, ensure the device is connected to the internet and shows <strong>Online<\/strong> status before continuing.<\/li>\n\n\n\n<li>On the macOS login window, click <strong>Sign in with JumpCloud<\/strong>.<br><img decoding=\"async\" width=\"1284\" height=\"1027\" class=\"wp-image-99379\" style=\"width: 600px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/siwjc_mac_initial.jpg\" alt=\"\" srcset=\"https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_initial.jpg 1284w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_initial-300x240.jpg 300w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_initial-1024x819.jpg 1024w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_initial-768x614.jpg 768w\" sizes=\"(max-width: 1284px) 100vw, 1284px\" \/><\/li>\n\n\n\n<li>In the <strong>User Login<\/strong> window, enter your email address and click <strong>Continue<\/strong>.<\/li>\n\n\n\n<li>Enter your password and click <strong>Login<\/strong>.<br><img decoding=\"async\" width=\"1284\" height=\"1027\" class=\"wp-image-99380\" style=\"width: 600px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/siwjc_mac_user_login2_password.jpg\" alt=\"\" srcset=\"https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_user_login2_password.jpg 1284w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_user_login2_password-300x240.jpg 300w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_user_login2_password-1024x819.jpg 1024w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_user_login2_password-768x614.jpg 768w\" sizes=\"(max-width: 1284px) 100vw, 1284px\" \/><\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>During account creation, user and device MFA requirements are ignored. After account creation, you&#8217;ll be prompted for MFA on next login if enforced by your admin.&nbsp;<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"5\">\n<li>After successful authentication, the account is created on the device and directs you back to the login screen.<\/li>\n\n\n\n<li>Click the newly added icon for your account and then enter your password. <br><img decoding=\"async\" width=\"1284\" height=\"1027\" class=\"wp-image-99446\" style=\"width: 600px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/siwjc_mac_new_account_signin_after_provision.jpg\" alt=\"\" srcset=\"https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_new_account_signin_after_provision.jpg 1284w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_new_account_signin_after_provision-300x240.jpg 300w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_new_account_signin_after_provision-1024x819.jpg 1024w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_mac_new_account_signin_after_provision-768x614.jpg 768w\" sizes=\"(max-width: 1284px) 100vw, 1284px\" \/><\/li>\n\n\n\n<li>Follow the on-screen prompts to complete the macOS account configuration. <\/li>\n\n\n\n<li>Once completed, you\u2019ll be logged in.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-signing-in-on-a-windows-device\">Signing in on a Windows Device<\/h3>\n\n\n\n<p><strong>To use Sign In with JumpCloud on a Windows device:<\/strong><\/p>\n\n\n\n<ol>\n<li>Ensure the device is connected to the internet before continuing.<\/li>\n\n\n\n<li>On the Windows login window, click <strong>Sign In with JumpCloud <\/strong>at the bottom left.<\/li>\n\n\n\n<li>Under JumpCloud, <strong>Click here to sign in.<\/strong><br><img decoding=\"async\" width=\"971\" height=\"727\" class=\"wp-image-99415\" style=\"width: 600px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/siwjc_win_initia_prompt_new.jpg\" alt=\"\" srcset=\"https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_win_initia_prompt_new.jpg 971w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_win_initia_prompt_new-300x225.jpg 300w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_win_initia_prompt_new-768x575.jpg 768w\" sizes=\"(max-width: 971px) 100vw, 971px\" \/><\/li>\n\n\n\n<li>In the <strong>User Login<\/strong> window, enter your email address and click <strong>Continue<\/strong>.<\/li>\n\n\n\n<li>Enter your password and click <strong>Login<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>During account creation, user and device MFA requirements are ignored. Once the account is created, you will be prompted for MFA on next login if enforced by your admin.&nbsp;<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"6\">\n<li>You\u2019ll be prompted to enter your password and set a PIN to complete the setup. The PIN can be used as an alternative to the JumpCloud account password.<br><img decoding=\"async\" width=\"971\" height=\"728\" class=\"wp-image-99416\" style=\"width: 600px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/10\/siwjc_win_pin_new.jpg\" alt=\"\" srcset=\"https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_win_pin_new.jpg 971w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_win_pin_new-300x225.jpg 300w, https:\/\/ti-1.jumpcloud.com\/wp-content\/uploads\/2023\/10\/siwjc_win_pin_new-768x576.jpg 768w\" sizes=\"(max-width: 971px) 100vw, 971px\" \/><\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<ul>\n<li>The PIN must be at least 6 characters.&nbsp;<\/li>\n\n\n\n<li>If PIN sign in is blocked by a Group Policy Object (GPO) on the device, accounts will be provisioned but not automatically signed in. Users must restart their device to sign in to the new account. See <a href=\"https:\/\/jumpcloud.com\/support\/troubleshoot-provision-new-users-on-login#pin\">Troubleshoot: Provision New Users on Device Login<\/a>.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"7\">\n<li>The Windows account provisioning process will begin. Once completed, you\u2019ll be logged in.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-disabling-self-service-account-provisioning-admin\">Disabling Self-Service Account Provisioning (Admin)<\/h2>\n\n\n\n<p><strong>To disable Self-Service Account Provisioning for your org:&nbsp;<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the <a href=\"https:\/\/console.jumpcloud.com\/login\/admin\">JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n<li>Go to <strong>DEVICE MANAGEMENT &gt; Devices &gt; Device Settings<\/strong>.<\/li>\n\n\n\n<li>Under Self-Service Account Provisioning:\n<ol class=\"is-lower-alpha\">\n<li>Click to toggle <strong>macOS<\/strong> to <strong>Off<\/strong> to disable on macOS devices.<\/li>\n\n\n\n<li>Click to toggle <strong>Windows<\/strong> to <strong>Off<\/strong> to disable on Windows devices.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<p>Disabling Self-Service Account Provisioning will not remove any existing JumpCloud users on devices. You can manage user to device associations in the JumpCloud Admin Portal. See <a href=\"https:\/\/jumpcloud.com\/support\/bind-users-to-devices\">Bind Users to Devices<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-faq\">FAQ<\/h2>\n\n\n\n<div class=\"wp-block-cgb-accordion-faq-wysiwyg gutenberg-accordion\"><a class=\"gutenberg-accordion-header is-type-title-default has-text-night-blue\" href=\"#what_if_i_only_want_to_enable_the_updated_macos_login_window_with_wireless_connectivity_\" data-action=\"collapse\">What if I only want to enable the updated macOS login window with wireless connectivity?<\/a><div id=\"what_if_i_only_want_to_enable_the_updated_macos_login_window_with_wireless_connectivity_\" class=\"gutenberg-accordion-content-container is-collapsible\"><div class=\"gutenberg-accordion-content\">\n<p>You can enable Self-Service Account Provisioning for macOS devices to take advantage of the updated login window. If JumpCloud users are already bound to devices via Admin action, the Sign in with JumpCloud button won&#8217;t appear.\u00a0<\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-accordion-faq-wysiwyg gutenberg-accordion\"><a class=\"gutenberg-accordion-header is-type-title-default has-text-night-blue\" href=\"#can_i_still_manually_associate_users_to_devices_when_self_service_account_provisioning_is_enabled_\" data-action=\"collapse\">Can I still manually associate users to devices when Self-Service Account Provisioning is enabled?<\/a><div id=\"can_i_still_manually_associate_users_to_devices_when_self_service_account_provisioning_is_enabled_\" class=\"gutenberg-accordion-content-container is-collapsible\"><div class=\"gutenberg-accordion-content\">\n<p>Yes, you can still associate users to devices via the Devices list in the Admin Portal. However, the <strong>Sign in with JumpCloud<\/strong> option will not be present on device login to add additional user accounts.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-accordion-faq-wysiwyg gutenberg-accordion\"><a class=\"gutenberg-accordion-header is-type-title-default has-text-night-blue\" href=\"#does_self_service_account_provisioning_support_account_takeover_\" data-action=\"collapse\">Does Self-Service Account Provisioning support account takeover?<\/a><div id=\"does_self_service_account_provisioning_support_account_takeover_\" class=\"gutenberg-accordion-content-container is-collapsible\"><div class=\"gutenberg-accordion-content\">\n<p>No, only the creation of a new JumpCloud account on a device is supported. Device association will fail if the JumpCloud username matches an existing local account on the device.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-accordion-faq-wysiwyg gutenberg-accordion\"><a class=\"gutenberg-accordion-header is-type-title-default has-text-night-blue\" href=\"#what_happens_if_users_need_to_enroll_in_mfa_\" data-action=\"collapse\">What happens if users need to enroll in MFA?<\/a><div id=\"what_happens_if_users_need_to_enroll_in_mfa_\" class=\"gutenberg-accordion-content-container is-collapsible\"><div class=\"gutenberg-accordion-content\">\n<p>When users Sign in with JumpCloud on a device, MFA requirements are temporarily ignored for provisioning. Users will need to enroll in MFA in a JumpCloud User Portal browser session. See <a href=\"https:\/\/jumpcloud.com\/support\/mfa-for-users\" target=\"_blank\" rel=\"noreferrer noopener\">MFA for Users<\/a>.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-troubleshooting\">Troubleshooting<\/h2>\n\n\n\n<p>See <a href=\"https:\/\/jumpcloud.com\/support\/troubleshoot-provision-new-users-on-login\">Troubleshoot: Provision New Users on Device Login<\/a>. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Self-Service Account Provisioning lets users bind their account to a JumpCloud-managed macOS or Windows device directly from the login window. [&hellip;]<\/p>\n","protected":false},"author":218,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2852,2932,2850],"support_tag":[],"coauthors":[3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Provision New Users on Device Login - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to enable Self-Service Account Provisioning and how users can create their JumpCloud account on devices from the login window.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Provision New Users on Device Login\" \/>\n<meta property=\"og:description\" content=\"Learn how to enable Self-Service Account Provisioning and how users can create their JumpCloud account on devices from the login window.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-07-19T20:01:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-974x1024.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning\",\"url\":\"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning\",\"name\":\"Provision New Users on Device Login - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/ti-1.jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning#primaryimage\"},\"image\":{\"@id\":\"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-974x1024.jpg\",\"datePublished\":\"2023-10-12T19:59:31+00:00\",\"dateModified\":\"2024-07-19T20:01:41+00:00\",\"description\":\"Learn how to enable Self-Service Account Provisioning and how users can create their JumpCloud account on devices from the login window.\",\"breadcrumb\":{\"@id\":\"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-974x1024.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-974x1024.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/ti-1.jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/ti-1.jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Provision New Users on Device Login\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ti-1.jumpcloud.com\/#website\",\"url\":\"https:\/\/ti-1.jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/ti-1.jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ti-1.jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/ti-1.jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/ti-1.jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/ti-1.jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/ti-1.jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Provision New Users on Device Login - JumpCloud","description":"Learn how to enable Self-Service Account Provisioning and how users can create their JumpCloud account on devices from the login window.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning","og_locale":"en_US","og_type":"article","og_title":"Provision New Users on Device Login","og_description":"Learn how to enable Self-Service Account Provisioning and how users can create their JumpCloud account on devices from the login window.","og_url":"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning","og_site_name":"JumpCloud","article_modified_time":"2024-07-19T20:01:41+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-974x1024.jpg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 minutes","Written by":"nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning","url":"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning","name":"Provision New Users on Device Login - JumpCloud","isPartOf":{"@id":"https:\/\/ti-1.jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning#primaryimage"},"image":{"@id":"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-974x1024.jpg","datePublished":"2023-10-12T19:59:31+00:00","dateModified":"2024-07-19T20:01:41+00:00","description":"Learn how to enable Self-Service Account Provisioning and how users can create their JumpCloud account on devices from the login window.","breadcrumb":{"@id":"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-974x1024.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/03\/ssap_admin_portal_device_settings-974x1024.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/ti-1.jumpcloud.com\/support\/get-started-self-service-account-provisioning#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ti-1.jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/ti-1.jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Provision New Users on Device Login"}]},{"@type":"WebSite","@id":"https:\/\/ti-1.jumpcloud.com\/#website","url":"https:\/\/ti-1.jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/ti-1.jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ti-1.jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/ti-1.jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/ti-1.jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ti-1.jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/ti-1.jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/ti-1.jumpcloud.com\/wp-json\/wp\/v2\/support\/94764"}],"collection":[{"href":"https:\/\/ti-1.jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/ti-1.jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/ti-1.jumpcloud.com\/wp-json\/wp\/v2\/users\/218"}],"version-history":[{"count":3,"href":"https:\/\/ti-1.jumpcloud.com\/wp-json\/wp\/v2\/support\/94764\/revisions"}],"predecessor-version":[{"id":113129,"href":"https:\/\/ti-1.jumpcloud.com\/wp-json\/wp\/v2\/support\/94764\/revisions\/113129"}],"wp:attachment":[{"href":"https:\/\/ti-1.jumpcloud.com\/wp-json\/wp\/v2\/media?parent=94764"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/ti-1.jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=94764"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/ti-1.jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=94764"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/ti-1.jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=94764"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}