Overview
Wirespeed connects to JumpCloud using the Service Account for APIs feature, which issues OAuth 2.0 client credentials (client_id / client_secret).
Wirespeed collects:
- Directory events — authentication, account changes, and group management events via the Directory Insights API
- Users — all system users for identity tracking and containment
- Endpoints — all JumpCloud-managed systems for endpoint asset tracking
Prerequisites
Enable Directory Insights
Directory Insights must be enabled for your JumpCloud organization before events can be ingested.- Log in to console.jumpcloud.com as an Administrator
- Navigate to Directory Insights in the left sidebar
- If prompted, enable the service for your organization
Create a Service Account
- Log in to console.jumpcloud.com as an Administrator
- Click your account name in the top-right corner and select My API Keys & Service Accounts
- Under Service Accounts, click Add Service Account
- Give the service account a descriptive name (e.g.
Wirespeed) - Under Roles, assign a role — see Permissions below
- Click Save
- Copy the Client ID and Client Secret — the secret is only shown once
Permissions
Option 1 — Manager Role (Simplest)
Assign the built-in Manager admin role to the service account. This grants all permissions required by the integration without additional configuration.Option 2 — Custom Role (Least Privilege)
For organizations that require least-privilege access, create a custom admin role with only the permissions Wirespeed needs. See Custom Admin Roles for instructions on creating a custom role. Enable the following permissions in the custom role: Device Management| Permission | Level |
|---|---|
| Devices | Full Access |
| Permission | Level |
|---|---|
| User Management | View + Update |
| Unlock User Accounts | ✓ |
| Expire User Password | ✓ |
| Activate / Suspend Users | ✓ |
| Manage User MFA | ✓ |
| Permission | Level |
|---|---|
| Directory Insights | View |

