> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wirespeed.co/llms.txt
> Use this file to discover all available pages before exploring further.

# JumpCloud

> Ingest directory events and sync users and endpoints from JumpCloud

## Overview

Wirespeed connects to JumpCloud using the [Service Account for APIs](https://jumpcloud.com/support/service-account-for-apis) feature, which issues OAuth 2.0 client credentials (`client_id` / `client_secret`).

Wirespeed collects:

* **Directory events** — authentication, account changes, and group management events via the [Directory Insights API](https://docs.jumpcloud.com/api/insights/directory/1.0/index.html)
* **Users** — all system users for identity tracking and containment
* **Endpoints** — all JumpCloud-managed systems for endpoint asset tracking

## Prerequisites

### Apple MDM

For Apple MDM support, see JumpCloud's [Get Started: Apple MDM](https://jumpcloud.com/support/get-started-mdm) guide. This is required if you want to manage Apple devices via Jumpcloud from within Wirespeed.

### Enable Directory Insights

Directory Insights must be enabled for your JumpCloud organization before events can be ingested.

1. Log in to [console.jumpcloud.com](https://console.jumpcloud.com) as an Administrator
2. Navigate to **Directory Insights** in the left sidebar
3. If prompted, enable the service for your organization

### Create a Service Account

1. Log in to [console.jumpcloud.com](https://console.jumpcloud.com) as an Administrator
2. Click your account name in the top-right corner and select **My API Keys & Service Accounts**
3. Under **Service Accounts**, click **Add Service Account**
4. Give the service account a descriptive name (e.g. `Wirespeed`)
5. Under **Roles**, assign a role — see [Permissions](#permissions) below
6. Click **Save**
7. Copy the **Client ID** and **Client Secret** — the secret is only shown once

## Permissions

### Option 1 — Manager Role (Simplest)

Assign the built-in **Manager** admin role to the service account. This grants all permissions required by the integration without additional configuration.

### Option 2 — Custom Role (Least Privilege)

For organizations that require least-privilege access, create a custom admin role with only the permissions Wirespeed needs. See [Custom Admin Roles](https://jumpcloud.com/support/custom-admin-roles) for instructions on creating a custom role.

Enable the following permissions in the custom role:

**Device Management**

| Permission | Level       |
| ---------- | ----------- |
| Devices    | Full Access |

**User Management**

| Permission               | Level         |
| ------------------------ | ------------- |
| User Management          | View + Update |
| Unlock User Accounts     | ✓             |
| Expire User Password     | ✓             |
| Activate / Suspend Users | ✓             |
| Manage User MFA          | ✓             |

**Monitoring & Analytics**

| Permission         | Level |
| ------------------ | ----- |
| Directory Insights | View  |