Configure JumpCloud for Arctic Wolf Active Response

With the Active Response service, Arctic Wolf® can perform identity-based response actions in your network using JumpCloud.

JumpCloud supports these response actions:
  • Disable/Enable a user
  • Add/Remove a user from a security group
  • Force a password reset

For more information, see Response action descriptions.

Note:

Configure this integration with your primary identity provider in a cloud-based environment. Arctic Wolf does not support hybrid or on-premises environments for identity-based response actions.

These resources are required:

  • A user account with the Administrator with Billing role in the JumpCloud Admin Portal

  • Contact your CST to validate the Active Response integration. Have an account or environment ready that Arctic Wolf can use to validate the desired response actions without causing interruptions.

Create a JumpCloud service account for Active Response

  1. Sign in to the JumpCloud Admin Portal with an administrator account that has the Administrator with Billing role.
    Note: If you need to create an administrator with this role, see Assigning an Admin Role to a User.
  2. Click Settings, and then click Service Accounts.
  3. Click +New.
  4. In the Name field, enter a name for the service account.
  5. In the Role list, select Manager.
  6. Under Key Type, select Client Secret.
  7. Click Configure.
    A dialog for setting the expiration date appears.
  8. In the Secret Lifetime list, select an expiration date for the service account.
  9. Click Activate.

    The Client ID and Client Secret are displayed. Copy these values, and then save them in a safe, encrypted location.

    You will provide these values to Arctic Wolf later.

    Note: The Client ID and Client Secret are only displayed once. You cannot retrieve them after closing this window.
  10. Click Close.

Obtain the JumpCloud organization ID for Active Response

  1. In the JumpCloud Admin Portal, click Settings, and then click Organization Profile.
  2. Copy the Organization ID value, and then save it in a safe, encrypted location.

    You will provide this value to Arctic Wolf later.

Provide JumpCloud Active Response credentials to Arctic Wolf

  1. Sign in to the Arctic Wolf Unified Portal.
  2. In the navigation menu, click Organization Profile > Integrations.
  3. On the Active Response tab, click New Active Response Integration +.
  4. Click JumpCloud.
  5. On the New Active Response Integration page, configure these settings:
  6. Click Save Integration.