Skip to main content

Overview

Wirespeed connects to JumpCloud using the Service Account for APIs feature, which issues OAuth 2.0 client credentials (client_id / client_secret). Wirespeed collects:
  • Directory events — authentication, account changes, and group management events via the Directory Insights API
  • Users — all system users for identity tracking and containment
  • Endpoints — all JumpCloud-managed systems for endpoint asset tracking

Prerequisites

Enable Directory Insights

Directory Insights must be enabled for your JumpCloud organization before events can be ingested.
  1. Log in to console.jumpcloud.com as an Administrator
  2. Navigate to Directory Insights in the left sidebar
  3. If prompted, enable the service for your organization

Create a Service Account

  1. Log in to console.jumpcloud.com as an Administrator
  2. Click your account name in the top-right corner and select My API Keys & Service Accounts
  3. Under Service Accounts, click Add Service Account
  4. Give the service account a descriptive name (e.g. Wirespeed)
  5. Under Roles, assign a role — see Permissions below
  6. Click Save
  7. Copy the Client ID and Client Secret — the secret is only shown once

Permissions

Option 1 — Manager Role (Simplest)

Assign the built-in Manager admin role to the service account. This grants all permissions required by the integration without additional configuration.

Option 2 — Custom Role (Least Privilege)

For organizations that require least-privilege access, create a custom admin role with only the permissions Wirespeed needs. See Custom Admin Roles for instructions on creating a custom role. Enable the following permissions in the custom role: Device Management
PermissionLevel
DevicesFull Access
User Management
PermissionLevel
User ManagementView + Update
Unlock User Accounts
Expire User Password
Activate / Suspend Users
Manage User MFA
Monitoring & Analytics
PermissionLevel
Directory InsightsView