Amplience centralizes IT management in a hybrid environment

The Challenge: Centralizing Identity & Device Management

As Amplience continued to scale, the company explored ways to bake more efficiency into its IT operations. The hybrid IT environment (cloud and on-premises) included a mix of Mac, Windows, and Linux devices, and they were using Jamf and Azure Entra for separate directory services.

We were looking to centralize identity and device management and enhance the onboarding process. Jamf and Microsoft weren’t working in tandem together, and we wanted to change that.

Sunil Virk, IT Infrastructure, Security, and Daily Operations Lead at Amplience

The Solution: JumpCloud's Integration Capabilities & Controls

The Amplience team chose JumpCloud, the unified identity, device, and access management platform, for its robust integration capabilities and maturity.

“We were interested in JumpCloud because of its integration capabilities and how it was a mature solution,” Sunil explains, noting seamless integration with the company’s HR system and Apple DEP.

“JumpCloud has streamlined these services into a single management point,” Sunil continues.

The Result: Shoring Up Security & Operational Efficiency

Enhanced Security and Access

Amplience manages 140 applications through JumpCloud. To shore up security, they utilize:

• LDAP for secure storage access.
• RADIUS to control secure WiFi access.
• Single Sign-On (SSO) and Multi-Factor Authentication (MFA) via JumpCloud Protect.
• Conditional Policies: "We use conditional policies for applications that need more security — just an additional layer of MFA to protect the application."
• JumpCloud Go™: "It’s a lot more seamless; a user just logs in. It’s not more password prompts, which is really nice."

Streamlined Onboarding and Offboarding (Zero-Touch)

JumpCloud's automated capabilities have significantly reduced the burden on the IT team:

• Native Integration: Seamlessly integrates with Apple DEP and the HR system.
• Automated User Creation: User creation flows from the HR system to JumpCloud automatically.
• Zero-Touch Deployment: "We can have the MacBook delivered to the end user and all they have to do is open it up... We’ve got our onboarding process pretty much down to zero-touch now.”
• Time Savings: "We are spending minimum resources on onboarding. It’s a lot of time saved for us. That’s definitely something to rave about."

Compliance and Control

JumpCloud helps Amplience meet its regulatory obligations:

• SOC 2 Compliance: Maintained using user groups and role-based access controls for easy data gathering during audits.
• Policies and Groups: Used to manage IT (e.g., preventing immediate OS upgrades) and control application access.
• Dynamic User Groups: Automatically add/remove users from applications (like Slack/O365) based on criteria (e.g., department and active status), eliminating manual deprovisioning.

Automation via Commands

The company leverages both pre-built and custom commands:

• "There’s a lot of stuff in the JumpCloud Library that is really useful."
• Custom commands are used to push applications remotely, including those hosted in AWS.

Looking Ahead

Amplience is participating in the JumpCloud Early Access program to test new features and is exploring zero-trust, patch management, and Password Manager to further enhance security and optimize IT spend.

Sunil Virk's final recommendation: "JumpCloud is constantly changing and improving, which is lovely... The capabilities for security enhancement, onboarding, offboarding, time saving, and just efficiency — I fully, fully recommend using JumpCloud.”