JumpServer

Authentication

Login Authentication

Unified Login and Authentication for resource; LDAP/AD authentication; RADIUS authentication; Single Sign-on (OpenID authentication, CAS authentication); SSO intergration;

Multi-factor Authentication

MFA with Google Authenticator, RADIUS authentication, etc;

Authorization

Multi-dimensional Authorization

Users, user groups, assets, nodes of assets, applications and system users can be authorized;

Asset Authorization

Displayed in a tree structure, assets and nodes of the asset tree can be flexibly authorized; Assets in nodes can inherit the authorization automatically; Child nodes automatically inherit the authorization from parent nodes;

Database Authorization

Support database authorization including MySQL, MariaDB, Redis, MongoDB, Oracle Database(X-Pack), PostgreSQL (X-Pack), SQL Server (X-Pack), ClickHouse (X-Pack);

Application Authorization

Support finer-grained application authorization;

Kubernetes Licensing

Support users to connect Kubernetes clusters through JumpServer;

Action Authorization

Deeper restriction on the control of file upload, download and connection actions of authorized assets. Control the permission of clipboard copy/paste (from outer terminal to current asset) (only Windows assets)

Time Authorization

The available (or accessible) time of authorized resources is supervised and controlled ;

Privileged Instruction

Support privileged instructions and black and whitelist;

Command Filtering

It can control the commands executed by authorized system users; Authorized system users’ command execution is under control.

File Transfer and Management

Support SFTP file upload/download and Web SFTP file management;

Accounting

Centralized Account Management

Support management of management user and system user;

User’s Role

Support 5 roles including super administrator, super auditor, organizational administrator (X-Pack), organizational auditor (X-Pack) and normal user;

Unified Password Management

Support asset password managed service; Automatic generation of password; Automatic push of password; Password expiration setting;

Auditing

Login Auditing

Support for auditing the logs of users logging into the JumpServer system and collecting the audit information to Syslog;

Operation Auditing

Support user operation behavior auditing;

Session Auditing

Support online session content auditing and historical session content auditing;

Video Auditing

Support auditing recordings of asset operations (such as Linux and Windows machine) and application operations, such as RemoteApp(X-Pack), MySQL, Kubernetes and others, through playback, and support uploading records to public clouds;

Instruction Auditing

Support auditing operation commands of asset and application and alerting to commands with high risks;

File Transfer Auditing

Support auditing the records of the file upload/download;

Real Time Monitoring

Provide the capability of monitoring and interrupting the user’s operation behavior in real time to the administrator/auditor, so as to improve the security of user’s operation.