Your Wi-Fi still asks a domain controller who you are. That box is the last reason AD survives — JumpCloud Cloud Directory keeps every user and group in one SaaS directory, fed by HR, Google Workspace, Microsoft 365 or AD, and answers LDAP and RADIUS from the cloud — so the domain controller kept alive for Wi-Fi and a few Linux servers can finally go.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
This page covers JumpCloud Cloud Directory — with Cloud LDAP, Cloud RADIUS and Directory Insights folded in. The rest:
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
A cloud directory is the list of who works here, kept as a service rather than on a domain controller you patch.
What consolidation actually replaces, dimension by dimension.
| Dimension | A domain controller in the cupboard | JumpCloud Cloud Directory |
|---|---|---|
| Directory | A domain controller in a cupboard | A cloud directory, hosted in your chosen region |
| Wi-Fi sign-in | One shared Wi-Fi password for all | Per-user RADIUS logins, MFA optional |
| Linux and build servers | Local accounts on every box | Cloud LDAP over LDAPS, granted by group |
| Leavers | Disabled in AD, forgotten in Google | Disabled once, from the HR feed outward |
| Audit trail | Event logs nobody reads | Directory Insights: $3 alone, or in SSO tiers |
| What it is NOT | — | Access-review governance, or a free tier |
The cheapest test is the 30-day trial on one office: import users, move one Wi-Fi network and one LDAP app, and see what still asks the old server.
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Each person gets one identity in JumpCloud, created there or imported; group membership, including dynamic groups built from attributes, decides what each user reaches.
Integrations pull people from an HR system such as Workday, BambooHR or HiBob, or from Google Workspace, Microsoft 365/Entra ID and AD, so one upstream change flows down.
Regional LDAP and RADIUS hosts (ldap.in and radius.in for Indian tenants) answer file servers, Jenkins, Wi-Fi access points and VPNs, with MFA available on both.
An agent ties the directory account to the local login on Windows, macOS and Linux; JumpCloud says agents keep device logins working through a cloud outage.
Identities come in from HR, Google, Microsoft or AD, live in JumpCloud’s cloud directory, and reach apps, Wi-Fi and laptops through LDAP, RADIUS and an agent.
JumpCloud Cloud Directory moves the directory to the cloud — and keeps LDAP and RADIUS answering for the systems that never learned SAML.
Create accounts in the console or import them, then let a single change in the source of truth reach every connected app and laptop.
HR integrations with Workday, BambooHR, HiBob and others create, change and disable accounts as people join, move and leave.
Sync with Google Workspace or Microsoft 365/Entra ID, WS-Federation included, or keep Active Directory alongside through AD Integration.
RFC 2307 Cloud LDAP over LDAPS or StartTLS for Jira, Jenkins, OpenVPN, file servers and Linux hosts, managed by group.
Point access points, VPNs and switches at JumpCloud’s RADIUS; it generates the shared secrets and can map users to VLANs by group.
Require MFA when users reach LDAP resources or sign in over RADIUS, so systems that speak only those protocols get a second factor too.
Directory Insights records admin changes and authentication events for audit reporting; it is a $3 per-user item of its own.
Dynamic groups populate from user attributes such as department or location, and each group carries the resources its members get.
JumpCloud says the directory holds human, machine and AI-agent identities; governing agents needs a Platform-tier package.
Three videos from JumpCloud’s official channel, all from 2024: University tutorials on configuring RADIUS and LDAP, and a release demo on federation and dynamic groups.
A 4:42 JumpCloud University walk-through from 2024 on pointing Wi-Fi or a VPN at Cloud RADIUS and granting access by group.
A 2:51 tutorial from 2024 on switching on Cloud LDAP, binding users and connecting an application that speaks LDAP.
A 19:48 release demo from February 2024 on identity federation and on groups that fill themselves from user attributes.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Here’s what genuinely sets it apart — and exactly where it stops.
Many Indian firms that grew up on Google Workspace never ran Active Directory, and those that did often keep a domain controller alive just for Wi-Fi and a few Linux boxes. Cloud Directory removes that last box: users live in JumpCloud, and LDAP and RADIUS are answered from its cloud, region by region.
It does not assume one suite. It can be the source of truth itself, take people from an HR system, or sit beside Google Workspace, Microsoft 365 and AD. That suits mixed fleets of Macs, Windows PCs and Linux laptops, where Entra ID would pull the whole estate deeper into Microsoft.
The directory lists at $3 per user a month on annual terms. LDAP, RADIUS and Directory Insights are each another $3, or arrive together in Platform and Platform Prime. A 60-person team can buy only what it uses and compare every line with Okta or Entra before signing.
LDAP and RADIUS are not in the $11 SSO or $13 Device Identity packages; you add them or move to a Contact-Sales Platform tier. The Mumbai region is for new tenants and covers data at rest, not logs or telemetry. There is no free tier for new accounts, no access-review campaigns and no analyst placement.
List each place people sign in today: Google or Microsoft, Wi-Fi, VPN, Linux servers, LDAP apps and every laptop.
Pick the India, US or EU region at sign-up; changing it later is a paid migration, not a setting you can flip.
Import users from HR or Google, bind ten laptops, and move one Wi-Fi network and one LDAP app across to JumpCloud.
Move the remaining LDAP binds and RADIUS clients, keep AD in sync until the last one moves, then switch it off.
Price directory, LDAP, RADIUS and Insights à la carte against a Platform quote, then fix the INR figure with GST.
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
“We retired our last domain controller: office Wi-Fi moved to Cloud RADIUS and two Linux build servers to Cloud LDAP in a weekend.”
“Google Workspace stays our mailbox, but joiners and leavers are now switched on and off in JumpCloud, with the HR feed in charge.”
“Mac and Windows logins use the same directory account, so a password change reaches the laptop and the apps in one step.”
“Our tenant pre-dated the Mumbai region, and moving it there is a paid migration. Choose the region on day one if audit needs it.”
“LDAP was not in the SSO package we bought, which surprised finance; adding it per user was easy once we read the pricing matrix.”
“Directory Insights gave our ISO auditors a clean trail of admin changes and logins without us building any logging of our own.”
Analyst firms bury this view behind paywalls, and review-site grids score satisfaction, not fit for your estate. So here’s TechBag’s synthesis of the cloud directory and workforce identity market — tap any vendor to see why it sits where it does.
Execution strength vs product vision — the classic market map, minus the paywall.
$3 a user a month annual; Mumbai region for new tenants.
The grid nobody publishes — how far each directory reaches into old protocols and device logins vs how many systems it can take identities from.
Hosted LDAP and RADIUS, cross-OS device login; HR, Google, M365 and AD.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Against Okta Universal Directory, Microsoft Entra ID, miniOrange Directory, Scalefusion OneIdP and Hexnode IdP — on sources, LDAP, RADIUS, factors, device login, price and India data.
| Dimension | JumpCloud Cloud Directory | Okta Universal Directory | Microsoft Entra ID | miniOrange Directory | Scalefusion OneIdP | Hexnode IdP |
|---|---|---|---|---|---|---|
| What it is | Open cloud directory | Okta’s identity store | Microsoft’s cloud IdP | India-built directory | UEM-linked identity | IdP for Hexnode fleets |
| Deployment | SaaS only | SaaS only | SaaS, plus Azure add-on | Cloud or on-prem | SaaS | SaaS |
| Identity sources | HRIS, Google, M365, AD | AD, LDAP and HR sync | AD sync; HR from P1 | AD, LDAP and HR | Built-in or federated | Hexnode-centred |
| LDAP for legacy apps | Cloud LDAP, $3 add-on | LDAP interface | Via Domain Services | Cloud LDAP headline | LDAP listed | LDAP listed |
| RADIUS for Wi-Fi and VPN | Cloud RADIUS, $3 add-on | On the SSO SKU | NPS extension | At the SSO SKU | Not recorded | Not recorded |
| Phishing-resistant MFA | WebAuthn, passkeys, Go | FIDO2 and passkeys | Passkeys and FIDO2 | At the MFA SKU | Not established | Not documented |
| Conditional access | Add-on or Prime | Full, depth by tier | Conditional Access, P1 | Basic | Device-signal policies | Device Trust Engine |
| Device login | Win, Mac, Linux agent | Higher suites | Windows-first | Via the MFA SKU | Device-bound login | Managed devices only |
| App ecosystem | Connector count unstated | 7,000+ OIN connectors | Microsoft-native | 5,000+ integrations | Inside Scalefusion | Hexnode fabric |
| Pricing model | Per user, à la carte | Per-user suites | Per user, or in M365 | Per user, INR quote | Per device | Inside UEM plans |
| Published entry price | $3/user/month | ~$6, $1,500 minimum | Free; P1 at $7 | Quote in INR | $4/device/month | Bundled, no list |
| India data region | Mumbai, new tenants | India tenants, 2026 | No India geo | On-prem in India | Ask for OneIdP | No India DC listed |
| Lock-in and exit | Re-point LDAP and RADIUS | A directory you rent | Tied to Microsoft 365 | Self-hostable | Tied to the UEM | Tied to Hexnode UEM |
| Best fit | Mixed fleets, no AD | Many-app estates | Microsoft 365 shops | INR, on-prem option | Scalefusion fleets | Hexnode fleets |
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
JumpCloud Cloud Directory is one of 30 iam, sso & mfa products TechBag carries. The IAM, SSO & MFA guide narrows them to a shortlist and shows the reasoning. →
Drag the sliders (users in the directory; IT-hour cost). Estimates model the IT time spent patching a domain controller, keeping a RADIUS server and local server accounts in step, and chasing leavers across systems, at an assumed 1.5 hours per user a year, with 70% of it removed by a hosted directory. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Published. Cloud Directory is $3.00 per user a month on annual billing or $4.00 month to month (USD), and it sits inside the SSO package ($11 / $13) and the Device Identity Management package ($13 / $15). Cloud LDAP, Cloud RADIUS and Directory Insights are $3 / $4 each; LDAP and RADIUS are bundled only in the Contact-Sales Platform and Platform Prime packages. New accounts start with a 30-day trial, not a free tier. TechBag quotes in INR with GST.
Best for a directory of record without AD
Best for a broader rollout
Best when servers, Wi-Fi or VPNs still need a directory
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Tell us your requirements and current tools — we’ll model it against what you spend today.
Take this into your next vendor call — including ours.
Is your tenant new enough to start in Mumbai, and which logs, telemetry and support data will still leave India?
Do you need LDAP and RADIUS? Neither is in the SSO or Device Identity packages, so price them à la carte.
Which system is the source of truth: HR, Google Workspace, Microsoft 365 or AD? Test the leaver flow first.
List every LDAP bind and RADIUS client, and confirm each works with LDAPS or StartTLS and per-user logins.
Suspended users are billable at JumpCloud; agree how leavers are deleted so dormant accounts stop costing money.
What still works if JumpCloud’s cloud is unreachable: laptop logins, LDAP binds, Wi-Fi? Test it during the pilot.
How long does Directory Insights keep events, and does that cover CERT-In’s 180-day log rule or need an export?
What term and user count does the quote cover? Ask TechBag for INR with GST, each à-la-carte line itemised.
List every place your people sign in today, or let a TechBag advisor map your LDAP apps, RADIUS clients and laptops, pick the right package and region, and get the quote in INR with GST.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.