# Automatically Fetch User Accounts without Manually Importing for JumpCloud

#### **<span style="color: rgb(53, 152, 219);">JumpCloud</span>**

**Intoduction**

JumpCloud allows you to automate user account creation and syncing **without manual CSV uploads** by integrating with external identity sources like **Active Directory, OneLogin, Okta, Azure AD, or APIs**.

**Automatic User Provisioning in JumpCloud**

Automatic provisioning means **creating and updating user accounts in JumpCloud from another source system** (e.g., your Identity Provider or directory service) using SCIM or other integrations — **no spreadsheets, no forms, no manual steps**.

<table border="1" id="bkmrk-source-system-integr" style="border-collapse: collapse; width: 100%; height: 142.344px; border: 1px double rgb(0, 0, 0);"><colgroup><col style="width: 33.3775%;"></col><col style="width: 33.3775%;"></col><col style="width: 33.3775%;"></col></colgroup><tbody><tr style="height: 35.9201px;"><th data-col-size="sm" data-end="902" data-start="875" style="height: 35.9201px;">**Source System**

</th><th data-col-size="sm" data-end="925" data-start="902" style="height: 35.9201px;">**Integration Type**

</th><th data-col-size="sm" data-end="972" data-start="925" style="height: 35.9201px;">**Description**

</th></tr><tr style="height: 46.6667px;"><td data-col-size="sm" data-end="1098" data-start="1071" style="height: 46.6667px;">**Active Directory (AD)**</td><td data-col-size="sm" data-end="1121" data-start="1098" style="height: 46.6667px;">AD Sync Agent</td><td data-col-size="sm" data-end="1168" data-start="1121" style="height: 46.6667px;">Syncs users/groups from AD to JumpCloud</td></tr><tr style="height: 29.8785px;"><td data-col-size="sm" data-end="1202" data-start="1169" style="height: 29.8785px;">**OneLogin / Okta / Azure AD**</td><td data-col-size="sm" data-end="1219" data-start="1202" style="height: 29.8785px;">SCIM Connector</td><td data-col-size="sm" data-end="1266" data-start="1219" style="height: 29.8785px;">Push users via SCIM to JumpCloud</td></tr><tr style="height: 29.8785px;"><td data-col-size="sm" data-end="1302" data-start="1267" style="height: 29.8785px;">**Google Workspace / HR System**</td><td data-col-size="sm" data-end="1324" data-start="1302" style="height: 29.8785px;">API Script (custom)</td><td data-col-size="sm" data-end="1370" data-start="1324" style="height: 29.8785px;">Use API to fetch users and sync to JC</td></tr></tbody></table>

#### <span style="color: rgb(53, 152, 219);">**Option 1: Active Directory (AD) Sync**</span>

##### Description:

Use JumpCloud’s **AD Sync Agent** to connect your on-prem Active Directory to JumpCloud.

<p class="callout info">What It Does:</p>

- Automatically fetches users and groups from AD into JumpCloud.
- Keeps user profiles updated.
- Supports password sync and group assignments.

##### Steps:

1. 1. **Install the AD Import Agent**:
        
        
        - Log in to JumpCloud Admin Portal.
        - Navigate to **Directory Integrations → Active Directory**.
        - Download the **AD Import Agent**.
        - Install it on your Domain Controller or a Windows server joined to the domain.
    2. **Install the AD Sync Agent (optional for write-back)**:
        
        
        - If you want to sync changes from JumpCloud to AD (two-way), install the Sync Agent too.
    3. **Register the Agents**:
        
        
        - During installation, provide the **JumpCloud API key**.
        - Approve the agent from the JumpCloud admin dashboard.
    4. **Set Up AD Group(s) for Sync**:
        
        
        - Create an AD security group (e.g., JumpCloudSyncUsers).
        - Add AD users to this group. Only members will sync.
    5. **Configure OU and Attribute Settings**:
        
        
        - Specify which Organizational Units (OUs) to include.
        - Map attributes like email, phone, title, etc.
    6. **Test and Enable Sync**:
        
        
        - Run a test sync.
        - Review previewed user data in JumpCloud.
        - Enable production sync.
    7. **Monitor Sync**:
        
        
        - Use the AD Integration logs in JumpCloud to monitor status.

#### <span style="color: rgb(53, 152, 219);">**Option 2: SCIM-Based Provisioning from OneLogin, Okta, Azure AD**</span>

##### Description:

If you're using a cloud identity provider, you can **push users into JumpCloud** using SCIM.

<p class="callout info">What It Does:</p>

- Auto-creates users in JumpCloud.
- Syncs attribute updates (name, email, etc.).
- Suspends users when removed from the source.

##### Steps:

1. **Prepare JumpCloud SCIM Settings**:
    
    
    - In JumpCloud Admin Portal, go to **SSO Applications → + Add App**.
    - Choose **Custom SCIM Connector**.
    - JumpCloud provides:
        
        
        - **SCIM Base URL**
        - **Bearer Token** (API key)
2. **Configure SCIM in IdP (e.g., OneLogin/Okta)**:
    
    
    - Create a new SCIM app integration.
    - Enter the SCIM Base URL and Token provided by JumpCloud.
    - Set the SCIM version to **2.0**.
3. **Define Provisioning Rules**:
    
    
    - Choose what triggers user creation (e.g., role membership).
    - Assign the app to users or groups.
4. **Enable SCIM Provisioning**:
    
    
    - Turn on auto-provisioning in your IdP.
    - Confirm SCIM connection test passes.
5. **Sync Begins Automatically**:
    
    
    - Users assigned in IdP are instantly created/updated in JumpCloud.
    - No manual intervention required.


#### <span style="color: rgb(53, 152, 219);">**Option 3: Custom Script Using JumpCloud API**</span>

##### Description:

If users are stored in another system (like Google Workspace, a database, or an HR app), use **JumpCloud’s API** to fetch and sync users automatically.

<p class="callout info">What It Does:</p>

- Programmatically creates users in JumpCloud.
- Can run on a schedule (daily, hourly, etc.).
- Completely hands-free after setup.

##### Steps:

1. **Get JumpCloud API Credentials**:
    
    
    - Go to **Admin Portal → API Settings**.
    - Copy your **API Key**.
2. **Write a Script**:
    
    
    - Use Python, Bash, or PowerShell.
    - Example logic:
        
        
        - Connect to your data source.
        - Format users as JSON.
        - Call POST /systemusers or PUT /systemusers/{id}.
3. **Schedule the Script**:
    
    
    - On Linux: Use cron to run the script hourly/daily.
    - On Windows: Use **Task Scheduler**.
4. **Optional**: Log output or push alerts to Slack/email.

<table border="1" id="bkmrk-method-no-manual-upl" style="border-collapse: collapse; width: 100%; height: 119.514px;"><colgroup><col style="width: 25.0336%;"></col><col style="width: 25.0336%;"></col><col style="width: 25.0336%;"></col><col style="width: 25.0336%;"></col></colgroup><tbody><tr style="height: 29.8785px;"><th data-col-size="sm" data-end="3592" data-start="3577" style="height: 29.8785px;">Method</th><th data-col-size="sm" data-end="3611" data-start="3592" style="height: 29.8785px;">No Manual Upload</th><th data-col-size="sm" data-end="3631" data-start="3611" style="height: 29.8785px;">Real-Time Updates</th><th data-col-size="sm" data-end="3648" data-start="3631" style="height: 29.8785px;">Deletion Sync</th></tr><tr style="height: 29.8785px;"><td class="align-center" data-col-size="sm" data-end="3737" data-start="3722" style="height: 29.8785px;">AD Sync</td><td class="align-center" data-col-size="sm" data-end="3756" data-start="3737" style="height: 29.8785px;">**✓**</td><td class="align-center" data-col-size="sm" data-end="3776" data-start="3756" style="height: 29.8785px;">**✓**</td><td class="align-center" data-col-size="sm" data-end="3794" data-start="3776" style="height: 29.8785px;">**✓**</td></tr><tr style="height: 29.8785px;"><td class="align-center" data-col-size="sm" data-end="3810" data-start="3795" style="height: 29.8785px;">SCIM (IdPs)</td><td class="align-center" data-col-size="sm" data-end="3829" data-start="3810" style="height: 29.8785px;">**✓**</td><td class="align-center" data-col-size="sm" data-end="3849" data-start="3829" style="height: 29.8785px;">**✓**</td><td class="align-center" data-col-size="sm" data-end="3867" data-start="3849" style="height: 29.8785px;">**✓**</td></tr><tr style="height: 29.8785px;"><td class="align-center" data-col-size="sm" data-end="3883" data-start="3868" style="height: 29.8785px;">Custom API</td><td class="align-center" data-col-size="sm" data-end="3902" data-start="3883" style="height: 29.8785px;">**✓**</td><td class="align-center" data-col-size="sm" data-end="3924" data-start="3902" style="height: 29.8785px;">**☓** (depends on job)</td><td class="align-center" data-col-size="sm" data-end="3942" data-start="3924" style="height: 29.8785px;">**✓**</td></tr></tbody></table>

#### <span style="color: rgb(53, 152, 219);">JumpCloud API</span>

- <span style="color: rgb(53, 152, 219);">https://docs.jumpcloud.com/api/</span>