> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security/cortex-cloud-saas-security/onboard-a-supported-saas-application/onboard-jumpcloud.md).

# Onboard JumpCloud

For SaaS Security to detect posture risks in your JumpCloud instance, you must onboard your JumpCloud instance to SaaS Security. Through the onboarding process, SaaS Security connects to a JumpCloud API by using an API key that you generate from the JumpCloud Admin Portal. After connecting to the JumpCloud API, SaaS Security scans your JumpCloud instance for misconfigured settings and account risks.

To access your JumpCloud instance, SaaS Security requires the following information, which you specify during the onboarding process.

| Item            | Description                                                                                                                                                                                                                       |
| --------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| API Key         | A unique, alphanumeric string that JumpCloud generates for a JumpCloud administrator account. SaaS Security uses the key to authenticate to the JumpCloud API. The API key inherits the permissions of the administrator account. |
| Organization ID | A unique identifier for your organization within the JumpCloud platform.                                                                                                                                                          |

To onboard your JumpCloud instance, complete the following actions.

***

### Step 1: Generate and Copy an API Key for Your Organization

1. Identify the JumpCloud account that you will use to create the API key.

Required Permissions: To create the API key, you must use an account assigned to the Administrator role in JumpCloud. The account must have API access enabled. To enable API access for the Administrator account, contact an administrator assigned to the Administrator with Billing role. Only administrators assigned to the Administrator with Billing role can enable API access for an Administrator account. The API key inherits the permissions of the Administrator account.

2. Using the credentials of the Administrator account, log in to the [JumpCloud Admin Portal](https://console.jumpcloud.com/login/admin).
3. Locate your profile icon in the upper-right corner of the page and select \<profile-icon> > My API Key.
4. In the API Key dialog, specify a Custom expiration date of 365 days and click Generate New API Key. JumpCloud generates and displays a new API key.
5. Copy the API key and paste it into a text file.

Note: Do not continue to the next step unless you have copied the API key. You must provide this key to SaaS Security during the onboarding process.

***

### Step 2: Identify Your Organization ID

1. In the JumpCloud Admin Portal, navigate to your Settings page. In the lower-left corner of the Admin Portal, click Settings.
2. On the Settings page, navigate to the Organization Profile tab.
3. Copy your Organization ID and paste it into a text file.

Note: Do not continue to the next step unless you have copied the Organization ID. You must provide this information to SaaS Security during the onboarding process.

***

### Step 3: Connect SaaS Security to Your JumpCloud Instance

By adding a JumpCloud app in Cortex, you enable SaaS Security to connect to your JumpCloud instance.

1. Log in to Cortex.
2. Select **Settings > Data Sources and Integrations > Add New**. You can use the Search bar to find the app you want to connect to.
3. Click the JumpCloud tile.
4. Under **Capabilities**, enter a name for your application.
5. Select Security Posture under Default Capabilities and click Next.
6. Under **Connections**, enter your API Key and Organization ID.
7. Under **Configurations**, select a Sync Interval. Choose a meaningful Tag to distinguish between various applications in different environments.
8. Click **Next** to complete the onboarding validation process.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security/cortex-cloud-saas-security/onboard-a-supported-saas-application/onboard-jumpcloud.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.