Best JumpCloud Alternatives in 2026: 15 Directory, SSO and Device Management Platforms

Updated August 2026: every price below was checked against the vendor's own pricing page this month. Where a vendor publishes nothing, that's stated plainly, and any third-party figure is labeled (reported) with its source named.

JumpCloud's pitch has always been simple: a cloud directory, SSO, MFA, conditional access and cross-platform device management on one per-user bill, instead of a directory tool, an SSO tool and an MDM tool from three vendors. If you're reading this, you're probably one of four people: an admin who has outgrown JumpCloud's device-heavy fleets, a buyer who assumed the "free for 10 users" plan was still open to new signups (it isn't), a Microsoft shop wondering whether Entra ID and Intune already cover this job, or someone pricing JumpCloud's bundle against building the same coverage from an identity provider plus a separate MDM. By profile: Okta or Microsoft Entra ID paired with a dedicated MDM if identity depth matters most, Rippling if IT should live in the same record as HR and payroll, Google Workspace or Cloud Identity if you already run Google, and Scalefusion for a second true one-bill bundle to compare JumpCloud against.

The comparison almost nobody runs honestly is bundle versus stack. JumpCloud prices identity and devices together, per user. Assemble the same coverage from two specialist vendors instead, and you're comparing a per-user identity fee against a per-device MDM fee on two separate invoices, a split that changes the math depending on how many devices your average employee carries. Every price cell below names its basis.

Key Facts

• The global identity and access management market was valued at $22.27 billion in 2025 and is projected to grow to $25.34 billion in 2026, reaching $77.92 billion by 2034 at a 15.10% CAGR. (Fortune Business Insights)
• More than 99.9% of compromised accounts don't have multi-factor authentication enabled, per Microsoft's own security guidance to partners. (Microsoft Learn)
• 31% of breaches now start with software vulnerabilities, overtaking stolen passwords as the top initial access vector for the first time in the Verizon Data Breach Investigations Report's 19-year history. (Verizon 2026 DBIR)
• Over 80% of the customers using Kandji (now Iru) for Apple device management run something else, commonly Microsoft Intune, to manage their Windows or Android devices, per CEO Adam Pettit at the October 2025 rebrand. (Computerworld)
• The global unified endpoint management market is projected to reach $30.73 billion by 2032, growing at a 22.0% CAGR across the 2025 to 2032 forecast period. (KBV Research)

What JumpCloud Actually Costs in 2026 (the Free Tier Is Grandfathered)

Start with the incumbent, because the single most-repeated fact about JumpCloud is stale. JumpCloud's own support documentation states plainly: "Customers who signed up for a JumpCloud account prior to February 1, 2024 can still use JumpCloud for free with up to 10 users and 10 devices." (JumpCloud) A new signup in 2026 cannot get that plan. New accounts get a free evaluation account meant for testing rather than production, plus a 30-day trial (reported). Price JumpCloud from $9 per user per month and treat anything else as a bonus.

Source: JumpCloud pricing. À la carte modules run $3 to $6 per user per month (annual) for things like Cloud Directory, MFA, Patch Management and Remote Access, and $5 to $6 for MDM and Passwordless Authentication. A 30-day trial is offered "with zero restrictions."

JumpCloud Bundles What Everyone Else Splits

Here's the comparison this category almost never runs. JumpCloud's Device and Identity Management tier is one bill for directory, SSO, MFA and cross-platform MDM. Nearly every alternative on this page sells the identity half and the device half separately, from separate companies, on separate invoices. Take a 100-person company where everyone has a laptop and about 60% also carry a company phone or tablet: 100 users, 160 devices. Price JumpCloud's bundle against assembling an identity provider plus a dedicated MDM at that same scale.

Don't assume "bundled always wins." JumpCloud's $1,300 a month sits in the middle of the pack, cheaper than stacking two Microsoft SKUs a la carte and cheaper than Scalefusion's device-priced suite at this device-heavy ratio, but pricier than pairing Okta, Google Cloud Identity or OneLogin with Hexnode separately, since those combinations bill for devices only where devices exist rather than folding device cost into a flat per-user rate. Feature depth isn't identical line for line (JumpCloud's tier skips patch management, a $3 to $4 add-on), so treat this as the cost of the same core job, not a feature match. SaaS consolidation covers weighing fewer invoices against a lower headline number, and the ratio flips again as device count rises: run your own numbers with the TCO model for SaaS.

Iru Is Not Kandji Anymore

If you've bookmarked Kandji as "the modern Apple MDM," update the bookmark. Kandji rebranded to Iru on 22 October 2025, kandji.io now redirects to iru.com, and the product expanded past Apple-only into Windows and Android. Six products launched alongside the rename: Workforce Identity, Endpoint Management, EDR, Vulnerability Management, Compliance Automation and a Trust Center, plus an MSP program. Existing Kandji customers migrated automatically with no functionality change. The logic aims squarely at platforms like JumpCloud and Intune: over 80% of customers who used Kandji for Apple management already ran something else, commonly Intune, for their Windows and Android fleets, per CEO Adam Pettit. (Computerworld) What hasn't changed: Iru publishes no pricing. Its site offers only "Request a quote" and "Book a demo," so any per-device Kandji figure still circulating online predates the rebrand and should not be trusted.

Quick Comparison Table

Stage Fit Matrix

The right JumpCloud replacement changes with company size, operating system mix, identity depth, and whether IT serves one tenant or many.

Sizing and Persona Table

1. Okta Workforce Identity: The Deepest Identity Layer, Sold Alone

Okta is what most IT leaders mean when they say "real SSO": mature adaptive MFA, a large app catalog, lifecycle management and access governance that JumpCloud's identity module doesn't try to match at the top end. What it doesn't do is device management. An Okta deployment covers the identity half of JumpCloud's job and needs a separate MDM for the other half.

Pricing: Per user per month, billed annually. Starter $6 (SSO, MFA, Universal Directory, 5 Workflows). Core Essentials $14. Essentials $17, adding Adaptive MFA, Privileged Access, Lifecycle Management, Access Governance and 50 Workflows. Professional and Enterprise are quote-only. A $1,500 annual contract minimum applies to Workforce Identity, regardless of tier or user count. (Okta) Best for: Organizations that want the deepest identity platform available and are willing to pair it with a separate MDM such as Hexnode or Intune. Not ideal for: Very small teams the $1,500 floor prices out, or anyone wanting device management in the same bill.

2. Microsoft Entra ID: Identity You May Already Be Paying For

Entra ID (formerly Azure AD) is Microsoft's cloud directory and SSO layer, and for a Microsoft 365 shop it's often already partially paid for. A free tier ships with any Azure, Microsoft 365, Intune or Power Platform subscription, covering MFA, unlimited SSO and basic self-service password reset. The paid tiers add conditional access, identity protection and governance, the pieces JumpCloud folds into its SSO tier.

Pricing: Per user per month, paid yearly. P1 $7.00. P2 $10.00. Entra Suite $12.00 (requires a P1 subscription or a package that includes one). Entra ID Governance $7.00. Entra Internet Access and Private Access $5.00 each. Entra ID Free ships with qualifying Microsoft subscriptions. (Microsoft) Best for: Microsoft 365 or Azure shops wanting identity that's native to the stack they already run. For the device side of this pairing, see Best Microsoft Intune Alternatives. Not ideal for: Mixed-cloud teams not wanting to deepen a Microsoft dependency just for directory services.

3. Microsoft Intune: The Device Half of the Microsoft Stack

Intune is the device management counterpart to Entra ID, and together they're the most common reason a Microsoft shop never looks at JumpCloud at all. On its own, Intune manages devices but has no identity layer, so it's really only a JumpCloud alternative when paired with Entra ID (or another directory).

Pricing: Per user per month, paid yearly. Plan 1 $8.00. Plan 2 $4.00 (requires Plan 1). Intune Suite add-on rate $10.00. Bundled inside Microsoft 365 Business Premium at $22.00 per user per month. (Microsoft) Best for: Teams already on Entra ID or another directory that just need the device management half. Full pricing and 10 alternatives at Best Microsoft Intune Alternatives. Not ideal for: Anyone wanting identity and devices from a single vendor without assembling two Microsoft SKUs.

4. Google Workspace and Cloud Identity: Directory Tied to Google's Stack

Google splits this the same way Microsoft does: Cloud Identity is the standalone directory and SSO layer, while full device management depth (beyond basic endpoint verification) typically needs a third-party MDM. For a company already running Google Workspace for email and docs, Cloud Identity Premium is the natural directory upgrade.

Pricing: Cloud Identity Premium is $6.00 per user per month on the annual/fixed-term plan ($72/year) or $7.20 monthly on the flexible plan, no commitment required. (Google Cloud) Google Workspace itself: Business Starter $7.00/user/mo, Business Standard $14.00, Business Plus $22.00, Enterprise custom; all business plans cap at 300 users. (Google Workspace) Best for: Google-native teams wanting directory and SSO without leaving the Google admin console. Not ideal for: Teams needing deep, policy-rich device management without adding a dedicated MDM on top.

5. Rippling: IT Bundled Into the Same Record as HR and Payroll

Rippling takes a different angle on "one bill": instead of bundling identity with devices like JumpCloud, it bundles IT (identity and access management, device management, inventory management) into the same employee record as HR, payroll and finance, so accounts and device access change automatically when someone joins or leaves.

Pricing: Not published. Rippling states most products are "billed on a simple per-employee, per-month basis," with some products carrying an additional monthly base fee, and a full quote is required. (Rippling) Third-party trackers report a starting rate around $8 per employee per month plus a base fee near $35 per month, with a realistic full IT-plus-HR build landing between $20 and $38 per employee per month (reported). Best for: Companies already using or evaluating Rippling for HR and payroll that want IT folded into the same system. Not ideal for: IT-only buyers who don't want to adopt Rippling's broader HR platform just to get directory and device management.

6. Iru (formerly Kandji): Apple-First, Now Cross-Platform, Still Quote-Only

Iru's pitch overlaps JumpCloud's more than any other Apple-heritage tool here: Workforce Identity, Endpoint Management, EDR, Vulnerability Management and Compliance Automation converge into one console, the way JumpCloud converges directory and devices. The difference is depth on security (EDR, vulnerability management) versus JumpCloud's broader OS coverage.

Pricing: Not published. Iru's pricing page offers only "Request a quote" and "Book a demo," stating pricing "is based on the solutions your organization needs, as well as the number of users and devices." (Iru) Best for: Apple-centric, security-conscious teams wanting identity and endpoint detection converging under one console. For the Apple-versus-Microsoft MDM debate, see Jamf vs Intune. Not ideal for: Buyers who need a budget figure this week, or teams further along on Windows than Apple.

7. Mosyle: The Budget Apple Alternative, With No Identity Layer

Mosyle solves a narrower problem than JumpCloud on purpose: Apple device management at a low, transparent price. That said, "free" moved again in 2026: Apple retired Apple Business Essentials, Apple Business Manager and Apple Business Connect on 14 April 2026 and replaced all three with Apple Business, a single platform with built-in MDM included at no cost and no stated device or user cap. (Apple) For an Apple-only shop asking "why pay for MDM at all," that's the real baseline now. Mosyle still earns its price with deployment templates, third-party app patching, a self-service catalog and unified Watch, TV and Vision Pro management that Apple's own built-in tool doesn't try to match, but a JumpCloud replacement built around either still needs a separate identity tool for the rest of your SaaS stack.

Pricing: Billed annually, 30-licence minimum on paid plans. Business FREE covers up to 30 devices. Business PREMIUM is $1.00 per Mac, iPhone, iPad and Vision Pro per month. Fuse for macOS is $3.00 per device per month; Fuse for iOS, iPadOS and visionOS is $1.50. (Mosyle) Best for: Apple-only fleets pairing a cheap, transparent MDM with a separate identity tool such as Google Cloud Identity or OneLogin. Not ideal for: Mixed fleets, or anyone wanting directory and SSO in the same console as device management.

8. Hexnode: Published Per-Device Pricing, No Identity of Its Own

Hexnode is the most straightforward MDM pairing partner for a mixed fleet: Windows, macOS, iOS, iPadOS, Android, tvOS and Fire OS from one console, with a full per-device tier table published up front, which is why it's the MDM half used throughout this article's stack-pricing table.

Pricing: Per device per month, 15-device minimum, annual billing saves 10%. Pro $2.20 monthly / $1.98 annual (2 technicians). Enterprise $3.20 / $2.88 (3 technicians). Ultimate $4.70 / $4.23 (4 technicians). Ultra is quote-only (5 technicians). (Hexnode) Miradore publishes a similar per-device model worth comparing directly: Premium $2.75/device/mo annual ($3.30 monthly) and Premium+ $3.95/device/mo annual ($4.75 monthly), also with a 15-device minimum. (Miradore) Organizations relying on MDM audit AI-generated content at a notably higher rate than those without it: 63% versus 48%, per Verizon's 2025 Mobile Security Index. (Verizon) Best for: Mixed-OS fleets of 50 to 500 devices wanting transparent MDM pricing, paired with a separate identity tool. Teams weighing MDM against RMM-style tools should see Best NinjaOne Alternatives. Not ideal for: Buyers who want directory and device management on one invoice, which is exactly JumpCloud's pitch.

9. Scalefusion: A Second Real Bundle, Priced Per Device

Scalefusion is the closest thing to a true JumpCloud-style bundle here, built the opposite direction: it starts as UEM and adds identity through OneIdP, a module handling single sign-on, device-based authentication, conditional access and just-in-time admin rights. The Scalefusion 360 Enterprise Suite folds UEM Enterprise, OneIdP Access Pro and Veltar security together at one device-based rate.

Pricing: Per device per month, annual billing only, 10-device minimum. Essentials $2.00, Growth $3.50, Business $5.00, Enterprise $6.00. The Scalefusion 360 Enterprise Suite (UEM Enterprise, OneIdP Access Pro, Veltar Security Pro) is $12.42 per device per month (reported), versus roughly $15 buying the three tiers separately (reported). OneIdP alone is not separately published. Best for: Teams wanting a genuine one-vendor identity-plus-device bundle who run closer to one device per user than the 1.6-device scenario used elsewhere in this article. Not ideal for: Fleets with several devices per employee, where per-device bundle pricing costs more than JumpCloud's per-user model.

10. ManageEngine AD360 / ADManager Plus: Built Around an On-Prem Directory

ManageEngine's answer isn't a cloud directory at all: AD360 layers identity governance, self-service password reset and provisioning on top of an Active Directory you already run, priced as a custom, component-based quote with no single published figure. The one piece with a real, checkable number is ADManager Plus, the core AD provisioning component.

Pricing: Annual subscription only, no perpetual option. ADManager Plus Standard starts at $595/year (1 domain, 2 help desk technicians). Professional starts at $795/year (1 domain). The free edition offers Standard features restricted to 100 domain objects. (ManageEngine) AD360 itself is priced by component with no published all-in figure; get a quote for the full suite. (ManageEngine) Best for: Hybrid organizations with an on-prem Active Directory who want governance and self-service layered on top of it, not replaced. Not ideal for: Cloud-native teams with no on-prem AD to manage, where this entire product line has little to offer.

11. Ping Identity: Enterprise Orchestration, With a 5,000-User Floor

PingOne for Workforce competes with Okta at the high end, with a lower headline per-user rate and a genuinely different catch: a 5,000-user minimum on an annual contract. That floor puts it out of reach for most companies that would otherwise consider JumpCloud, whose own Platform Essentials tier tops out at 300 users.

Pricing: Per user per month, annual contract. Essential $3 (SSO, directory, standards support, employee portal). Plus $6, adding Adaptive MFA and passwordless support. Both tiers require a 5,000-user minimum. A 30-day trial is available. (Ping Identity) Best for: Enterprises already operating at 5,000-plus employees who want adaptive identity orchestration at a lower per-user rate than Okta. Not ideal for: Nearly everyone reading a JumpCloud comparison, since the user floor excludes small and mid-size buyers outright.

12. OneLogin: The Budget Okta Alternative, Without Device Management

OneLogin (by One Identity) competes directly with Okta on price rather than depth: published list figures land lower at comparable tiers, though OneLogin's own pricing page renders through JavaScript and returned no content to automated fetching, so treat the figures below as third-party observed rather than vendor-confirmed.

Pricing: OneLogin's own pricing page did not return fetchable content. Vendr, which tracks buyer-side SaaS spend, reports Starter around $2 to $4 per user per month, Advanced $4 to $6, and Unlimited $8 to $12-plus, with a median annual contract of $30,066 across 74 purchases (reported). (Vendr) Best for: Budget-conscious SSO buyers wanting an established Okta alternative and willing to verify pricing directly with sales. Not ideal for: Anyone wanting device management bundled in, or a screenshot-able vendor price before a conversation.

13. Cisco Duo: MFA-First, Lighter on Directory

Duo built its reputation on strong, phishing-resistant multi-factor authentication rather than a full directory and SSO suite, and it still leads with that strength. It's a legitimate JumpCloud alternative only for the authentication slice: a full directory or device management layer still needs pairing with something else.

Pricing: Per user per month. Free up to 10 users. Essentials $3, adding Duo Directory, phishing-resistant MFA, passwordless authentication and SSO. Advantage $6, adding Cisco Identity Intelligence and risk-based authentication. Premier $9, adding VPN-less remote access and device trust verification. Under 100 users, purchases come in 10-user increments; over 100 users, 25-user increments. (Cisco Duo) Best for: Teams prioritizing strong MFA first, especially those already in the Cisco security ecosystem. Not ideal for: Buyers wanting a full directory, app-catalog SSO or device management in the same product.

14. Foxpass: Network Access and Directory, Not App SSO

Foxpass solves a different slice of the identity problem than most tools here: Cloud RADIUS, Cloud LDAP and Cloud PKI for authenticating Wi-Fi, VPN and SSH access, rather than single sign-on into a catalog of SaaS apps. It's the right pick when the real pain is network authentication, not app login.

Pricing: Standard and Advanced tiers are custom-quoted with no published per-user rate. The one published figure is Cloud PKI as a standalone product: $0.50 per user per month, billed annually, with volume discounts at 1,000-plus users. (Foxpass) Best for: Infrastructure and network teams whose real problem is Wi-Fi, VPN or SSH key authentication rather than SaaS app SSO. Not ideal for: Teams wanting a broad SaaS app catalog or native device management alongside directory services.

15. SimpleMDM: Small Apple Fleets, No Identity Layer Included

SimpleMDM rounds out the list as one of the simplest paid ways to manage a small Apple fleet, with none of JumpCloud's identity ambitions. No minimums, no contracts, and a pricing page that reads in fifteen seconds, the entire appeal for a small team that doesn't want to become MDM specialists (or, per the Mosyle section above, doesn't want to rely on Apple's own free built-in tool alone).

Pricing: $3.00 per device per month billed monthly, or $2.50 billed annually (an 18% saving). Enterprise is custom-quoted. The vendor states "no hidden fees or contracts, ever." (SimpleMDM) Best for: Small, Apple-only fleets pairing simple MDM with a lightweight identity tool such as Google Cloud Identity or Cisco Duo. Not ideal for: Mixed-OS environments or anyone wanting identity and device management from one vendor.

How to Choose: Decision Framework

Identity and device decisions touch security, compliance and every other SaaS renewal at once, so run the shortlist through a structured process rather than a feature checklist. The vendor diligence checklist matters more for quote-only vendors like Iru, Rippling and Ping, and the security and compliance review covers what to ask before any of these tools touch your directory.

What Leaving JumpCloud Actually Costs

Nobody swaps a directory for free. Every device needs re-enrollment, every conditional access policy keyed to JumpCloud device trust has to be rebuilt, and SSO connections to every downstream SaaS app need re-authorizing one at a time. Budget one to three months running both platforms in parallel, and migrate identity before devices so users aren't locked out mid-move. If the new stack splits identity and devices across two vendors where JumpCloud combined them, add the work of connecting the two consoles (SCIM provisioning, at minimum). Switching SaaS vendors covers sequencing a move like this, and if the wider IT stack is due for review too, Best IT Asset Management Software in 2026 and Best SaaS Management Software in 2026 cover the adjacent categories most teams reassess at the same time.

What to Do Next

Count your users and your devices, and divide. Close to one device per person, a two-vendor stack (an identity provider plus a dedicated MDM) usually beats JumpCloud's bundled price. Well above that ratio, JumpCloud's per-user model, or another true bundle like Rippling, gets more competitive fast. Then pilot two approaches, not five: run 20 real users through onboarding, one conditional access policy, one device enrollment and one offboarding, and time how long each step takes across both admin consoles. If your organization already runs Microsoft 365, start with Entra ID and Intune before adding a third vendor. For the service desk and ticketing side of the same IT stack, Best Freshservice Alternatives and Best Jamf Alternatives cover the categories most teams evaluate in the same budget cycle.