Intune is the only complete replacement, and only for organizations on Microsoft 365 E3 or E5, where it is already paid for and Microsoft’s directory sits beside it.
Everything else replaces JumpCloud’s device management alone: Jamf or Addigy for Apple, Scalefusion or Hexnode for shared devices priced per device. Keeping JumpCloud’s directory and moving only devices is a legitimate middle path.
- Complete swap on Microsoft 365: Intune, already paid for
- All Apple: Jamf for depth, Addigy for support included
- Shared devices: Scalefusion or Hexnode, per device
- Middle path: keep the directory, move the devices
- No directory or SSO alternative is ranked here
We do not accept payment for placement. Scores come from a published 40-point rubric, applied to vendor pricing pages read at the source on September 10 and 11, 2026, plus the JumpCloud platform page and product menu and the Okta product menu, read on September 23, 2026; vendors can dispute a fact but not a score. How we rank software · Affiliate disclosure
The rankingComparison table
| Tool | Best for | Pricing model | Starts at | Score |
|---|---|---|---|---|
 Microsoft IntuneClosest match | Organizations already on Microsoft 365 E3 or E5 | Per user | Included in M365 E3 and E5 | 8.9 |
 Jamf | All-Apple organizations leaving for depth on Mac and iPhone | Per device | $12.50 / Mac / mo | 8.8 |
 ScalefusionShared devices | Fleets of shared devices, kiosks and scanners | Per device | $2 / device / mo | 7.6 |
 Hexnode | Small mixed fleets that want a published per device price | Per device | $2.20 / device / mo | 7.4 |
 AddigyMacs, support included | Mac fleets that want support in the price | Per device | From $8.25 / Mac / mo | Not scored |
An alternative to JumpCloud has to answer a question the product name hides: JumpCloud is three things sold as one. A cloud directory that replaces Active Directory, single sign-on with multi-factor authentication, and device management.
Its own price list shows the seams, because it sells each feature on its own: most at $3.00 per user per month, MDM at $5.00, and packages from $9.
What the JumpCloud platform menu actually contains
JumpCloud groups its own platform menu into identity management, access management and device management. Identity management holds the cloud directory, identity lifecycle management and HRIS integration. Access management holds single sign-on, cloud LDAP, cloud RADIUS, multi-factor authentication, a password vault, conditional access and privileged access management.
Device management holds unified endpoint management, patch management, remote access, Apple MDM, Android EMM, Windows and Linux management, asset management and system insights. JumpCloud describes the platform as sitting at the intersection of devices, identities and access. Only that third group has alternatives ranked on this site.
Which part of JumpCloud you are leaving
| If the problem is | Look at | What it replaces |
|---|---|---|
| You already pay for Microsoft 365 E3 or E5 | Intune, with Microsoft’s directory | All three parts, from one vendor |
| The estate is all Apple | Jamf, or Addigy | Device management |
| Shared devices, kiosks, scanners | Scalefusion or Hexnode | Device management, per device |
| Support costs extra | Addigy, support included | Device management on Macs |
| The directory, SSO or MFA itself | Not covered by any ranking here | See below |
The last row is the honest gap on this page. Every one of the JumpCloud competitors ranked here replaces device management, and none of them is a cloud directory, an SSO provider or an identity and access management platform.
If the directory is why you bought JumpCloud, a device manager is half an answer. The only complete one below is Microsoft’s, and only for organizations already inside it. Most JumpCloud alternatives lists skip that distinction, which is why they read as longer than they are.
The unit decides more than the product
JumpCloud is priced per user and never per device. That is the reason to leave and the reason to stay, depending on the ratio of devices to people.
A hundred people with a laptop, a phone and a tablet each pay for a hundred on JumpCloud and for three hundred on any per device product. A room of kiosks, or thirty staff sharing two hundred scanners, is the reverse.
Count that ratio before reading any row below, because it moves the answer more than any feature does. It is also the one number that stays true across every alternative to JumpCloud on this page, whatever else changes.
MethodHow we picked
Why the ranks and the scores disagree
The number beside each ranked product is not this page’s judgment. It is the score that product already holds on the MDM ranking, printed here so the two pages never disagree about the same tool. This page adds no scores of its own, and Addigy, which is on no ranking, carries none.
The ranks answer one question: how well does this replace JumpCloud, for the reasons people actually leave it. So Intune sits first because it is the only row that can replace all three parts, and Jamf, with nearly the same score, sits second because it replaces one part and only for Apple.
JumpCloud vs Intune
JumpCloud vs Intune is the comparison most readers arrive with, and it is not symmetrical. JumpCloud is one platform covering identity, access and devices. Intune is the device half of a Microsoft stack whose identity and access half is Entra ID, licensed in the same subscription rather than inside Intune.
So the honest form of JumpCloud vs Intune is JumpCloud against Intune plus Entra ID. For an organization already on Microsoft 365 E3 or E5 that pairing is paid for, which is why Intune sits first here. For everyone else the comparison starts with a new Microsoft subscription, not with a cheaper device manager.
The second difference is coverage across operating systems. JumpCloud’s own menu lists Windows, Apple, Linux and Android management side by side, so decide which of those your teams need managed before comparing. An all-Apple estate is why Jamf and Addigy are on this page at all.
The third is what the security capabilities cost. On JumpCloud, conditional access, MFA and zero trust are separate line items on the a la carte list. On the Microsoft side they belong to Entra ID rather than to Intune, so check which Entra ID plan your subscription includes before treating them as free.
The identity and access half, and what is not here
Nothing on this page replaces JumpCloud’s identity and access management. That is a gap rather than an oversight. No ranking on this site scores identity providers, and pricing one properly is its own project.
The vendors readers usually name are Okta and Microsoft Entra ID. Okta’s own product menu lists Universal Directory, single sign-on, privileged access management and identity governance under identity and access management. Entra ID is the directory that sits beside Intune. Neither is ranked or priced here, so this page names them and stops.
Where the directory of record already lives changes the size of that job. JumpCloud’s own menu lists a Google pairing, and its platform page names Google, Active Directory and HR systems as sources it integrates with. If one of those is already authoritative, you are leaving a sync layer rather than the directory itself.
If you do move the identity half, the concepts to settle first are IAM versus PAM, multi-factor authentication and conditional access. Those three are what a directory swap has to reproduce, and they are what JumpCloud sells as separate line items.
Security ownership is worth settling at the same time. In most organizations one team runs devices and another runs identity, and JumpCloud let both work from one console. Splitting the halves means naming which team owns MFA enforcement and which owns device compliance before either tool is bought.
Reading a JumpCloud competitors list
Most JumpCloud competitors lists are MDM lists. That is a fair answer for the device half and no answer for the other two, because identity and access products sit in a different market, with identity governance and lifecycle features that no MDM carries. Check which half a list ranks before using its order.
What moves when you leave
Leaving only the device management half is the smaller project: re-enroll devices into the new MDM, rebuild configuration profiles and software packages, and keep JumpCloud as the directory and SSO. That arrangement is legitimate, since JumpCloud sells its features separately, and it keeps the parts that are hardest to move.
Leaving the directory is the larger one. Every user account, every group, every application connected for single sign-on and every LDAP or RADIUS consumer has to point somewhere else, and a password or MFA reset for the whole company is the usual cost. Plan it as an identity migration, not a device swap.
Security policy is the part that does not show up in a feature matrix. JumpCloud enforces MFA, conditional access and zero trust rules from the same console as the devices. Split the two halves and those rules are maintained in two places, which is the real cost of the middle path.
Access to the network is the other overlooked piece. Cloud RADIUS in JumpCloud is what admits users to Wi-Fi and VPN, and a device manager does not carry it. Whoever keeps the directory keeps that job, so agree which team owns it before the cutover rather than after.
Microsoft Intune
The only option here that can replace all three parts of JumpCloud from one vendor, and the reason is that Microsoft already sells the other two.
Intune handles device management; Microsoft’s own directory and single sign-on, Entra ID, sit in the same ecosystem. Which Entra ID plan your subscription includes decides how much of JumpCloud’s SSO tier it covers, so check that before assuming.
For an organization on Microsoft 365 E3 or E5, Intune is already paid for, and JumpCloud’s Device Management package is roughly $10,800 a year for 100 people to do a job already licensed. It tops the MDM ranking at 8.9 against JumpCloud at 8.1.
The case against is the one JumpCloud is built on: a company with no Microsoft 365, no Active Directory and no intention of running either gets directory, SSO and device management from JumpCloud in one product, and would be buying into an ecosystem to replace it.
Where it wins
- Already paid for on Microsoft 365 E3 and E5
- Directory and SSO available from the same vendor
- Tops the MDM ranking at 8.9 against JumpCloud at 8.1
- A device-only license for shared devices and kiosks
Where it loses
- Only a clean swap for organizations already on Microsoft 365
- Pricing clarity 3 of 5: the base plan price is not published
- Advanced pieces are add-ons of $2.00 to $5.00 per user off E3 and E5
- Buying an ecosystem, not one product, if you are not on Microsoft today
How Microsoft Intune scores, criterion by criterion
Microsoft Intune pricing, verified September 11, 2026
| What you buy | Price | Annual | Notes |
|---|---|---|---|
| Microsoft 365 E3 | $39.00 / user / mo | Paid yearly | Intune included |
| Without E3 or E5 | $2.00 to $5.00 | Per user / mo | Add-ons on the pricing page |
| JumpCloud, for comparison | $9 / user / mo | Device Management | Billed annually |
Jamf
For an all-Apple estate, the specialist. Jamf holds 8.8 on the MDM ranking and its Mac price bundles management with Jamf Connect and Jamf Protect, so identity on the Mac and endpoint security come in the same $12.50 per device per month.
The trade is the unit. JumpCloud charges per user; Jamf charges per device, with a 25 device minimum on its business products. A hundred people with a Mac and an iPhone each is $25,350 a year at list on Jamf, against $10,800 on JumpCloud’s Device Management package, and Jamf manages nothing that is not Apple.
What it does not replace is JumpCloud’s directory and single sign-on for the rest of the business. Jamf Connect ties the Mac login to an identity provider; it is not one.
Where it wins
- The complete price list is published, minimums included
- The Mac price bundles Jamf Connect and Jamf Protect
- Mobile covers iOS, iPadOS, visionOS, watchOS and tvOS, plus Android
- Jamf Now from $4 per device for organizations under 25 employees
Where it loses
- No Windows management at all
- Per device with a 25 device minimum, against JumpCloud per user
- The highest per device list price on the MDM ranking
- Not a directory or SSO provider, so it replaces one part of JumpCloud
How Jamf scores, criterion by criterion
Jamf pricing, verified September 11, 2026
| What you buy | Price | Annual | Notes |
|---|---|---|---|
| Jamf for Mac | $12.50 / device / mo | Billed annually | Pro, Connect and Protect |
| Jamf for Mobile | $5.75 / device / mo | Billed annually | 25 device minimum |
| Jamf Now | From $4 / device / mo | Published | Under 25 employees |
Scalefusion
The answer to the most common reason JumpCloud is the wrong shape. JumpCloud prices per user and never per device, so thirty warehouse staff sharing two hundred scanners pay for thirty users, which is cheap, but a room of kiosks with no users at all has nobody to license.
Scalefusion prices per device, with all four tiers published from $2 to $6 per device per month, and takes full marks for pricing clarity on the MDM ranking, where it scores 7.6. For single-purpose and shared hardware that is the unit that fits.
The caution is the inverse: a workforce where each person carries a laptop, a phone and a tablet pays three times on a per device product, which is exactly the case JumpCloud’s per user price is built for. Scale scores 3.5 of 5 for less published evidence at very large sizes.
Where it wins
- Per device, the right unit for kiosks, scanners and shared devices
- All four tiers published, full marks for pricing clarity
- The entry tier is $24 a device a year
- Covers mobile and desktop platforms
Where it loses
- Several devices per person multiplies the bill
- No directory or SSO, so it replaces one part of JumpCloud
- Scale 3.5 of 5 for less published evidence at large sizes
- Security and compliance 5.5 of 8, against JumpCloud at 7
How Scalefusion scores, criterion by criterion
Scalefusion pricing, verified September 11, 2026
| What you buy | Price | Annual | Notes |
|---|---|---|---|
| Entry tier | $2 / device / mo | $24 / year | Published |
| Top tier | $6 / device / mo | $72 / year | Published |
| JumpCloud MDM alone | $5.00 / user / mo | A la carte | Per user, not per device |
Hexnode
For a smaller business leaving JumpCloud over price, with a mixed estate of Windows, Macs and phones. Hexnode publishes three tiers from $2.20 to $4.70 per device per month, offers a 14 day trial on every tier, and covers Windows and macOS alongside mobile.
At 250 devices on the $3.20 middle tier it is $9,600 a year, close to JumpCloud’s $10,800 for 100 people on Device Management. Which is cheaper depends entirely on how many devices each person carries, and that ratio is worth counting before either quote.
It scores 7.4 on the MDM ranking, with thinner security and compliance depth than JumpCloud and the least published evidence at several thousand devices. Like every row after the first, it replaces JumpCloud’s device management and nothing else.
Where it wins
- Three tiers published with clear per device figures
- A 14 day trial on every tier, no sales call needed
- Windows and macOS alongside mobile
- Priced within reach of a few dozen devices
Where it loses
- Security and compliance 5.5 of 8, against JumpCloud at 7
- Least published evidence at several thousand devices
- Per device, so several devices per person multiplies the bill
- No directory or SSO
How Hexnode scores, criterion by criterion
Hexnode pricing, verified September 11, 2026
| What you buy | Price | Annual | Notes |
|---|---|---|---|
| Entry tier | $2.20 / device / mo | Published | 14 day trial |
| Middle tier | $3.20 / device / mo | Published | 250 devices: $9,600 / yr |
| Top published tier | $4.70 / device / mo | Published | 14 day trial |
Addigy
One of the less obvious costs on JumpCloud’s price list is support: premium support is a separate line at $2.00 per user per month. Addigy, an Apple device manager, includes support on every plan and starts at $8.25 per Mac per month for its Apple MDM plan.
It is per device and per Mac: iPhones and iPads are an add-on at a rate it does not publish, and its Security Suite, from $16 per Mac, adds SentinelOne EDR with a 24/7 MDR service. For a Mac fleet that wanted device management and a phone number to call, it is the most direct answer on this page.
It carries no score because it is not on the MDM ranking. Its figures come from its pricing page on this site, read at the vendor.
Where it wins
- Support included on every plan, where JumpCloud charges $2.00 per user
- Starting prices published, from $8.25 per Mac
- A Security Suite with EDR and 24/7 MDR from $16 per Mac
- No multi-year contract required
Where it loses
- Apple only
- iPhone and iPad add-on rate not published
- No directory or SSO, so it replaces one part of JumpCloud
- Not on a ranking here, so no score to compare
Addigy pricing, verified September 11, 2026
| What you buy | Price | Annual | Notes |
|---|---|---|---|
| Apple MDM | From $8.25 / Mac / mo | Per device | Support included |
| Security Suite | From $16 / Mac / mo | Per device | EDR and 24/7 MDR |
| JumpCloud premium support | $2.00 / user / mo | Extra | For comparison |
FitWho this ranking is for, and who should skip it
For most readers the short version is this. On Microsoft 365 E3 or E5, Intune plus Microsoft’s directory is the one complete replacement. On an all-Apple estate, Jamf for depth, or Addigy for support in the price. For shared and single-purpose devices, a per device product such as Scalefusion or Hexnode fits the unit.
And if the directory and single sign-on are what you value, the cheapest change may be to keep them on JumpCloud and replace only the device management, which its own a la carte list makes possible. An alternative to JumpCloud does not have to be a replacement for all of it.
Two things are worth saying plainly about the alternatives on this page. They change what your endpoint teams run and not what your identity teams run. And every one of them publishes a price, which is the test this site applies before a product reaches any ranking.
What would not be advice is a list of every identity and access management vendor that competes with JumpCloud’s directory. None is ranked or priced here, and naming them without that work would be advertising.
Pricing an IAM platform properly means reading each vendor’s own list the way the pricing pages on this site do. That is its own piece of work rather than a row in this table.
ChangelogWhat changed in this update
- First published. Five options matched to the part of JumpCloud a buyer is leaving, with ranked products carrying their MDM ranking scores and Addigy, unranked, carrying none; the directory and SSO gap named rather than filled.
- Adds the three groups JumpCloud uses in its own platform menu, a JumpCloud vs Intune section, the identity and access half stated as a gap with the vendors readers ask about named, and the network access and security policy costs of splitting the halves. No pick, score or price changed.
FAQFrequently asked questions
What is the best JumpCloud alternative?
For an organization on Microsoft 365 E3 or E5, Intune with Microsoft’s directory, because it can replace all three parts of JumpCloud and Intune is already paid for. For an all-Apple estate, Jamf or Addigy. For shared devices, a per device product such as Scalefusion or Hexnode.
What are JumpCloud’s main competitors?
For device management, the products on the MDM ranking: Intune, Jamf, Scalefusion, Hexnode, ManageEngine MDM Plus and Kandji. For the directory, SSO and MFA half, identity and access management vendors such as Okta and Microsoft Entra ID, which no ranking on this site covers.
What is the difference between JumpCloud and Intune?
JumpCloud is one platform covering identity, access and device management. Intune is the device half of a Microsoft stack whose identity and access half is Entra ID. So JumpCloud vs Intune is really JumpCloud against Intune plus Entra ID, which is why the subscription you already hold decides it.
What sits in JumpCloud’s access management group?
On JumpCloud’s own platform menu: single sign-on, cloud LDAP, cloud RADIUS, multi-factor authentication, a password vault, conditional access, privileged access management, access requests and directory insights. None of the device managers ranked on this page replaces that group, which is the gap this page names.
Does any alternative here replace JumpCloud’s SSO and MFA?
Only Intune does, and only through Microsoft Entra ID beside it rather than through Intune itself. Jamf, Addigy, Scalefusion and Hexnode are device managers. If SSO and MFA are what you are leaving, you are shopping for an identity provider, not for an MDM.
Is JumpCloud an IAM platform?
It sells identity and access management alongside device management. Its own platform menu separates identity management, which holds the cloud directory and lifecycle management, from access management, which holds SSO, MFA, LDAP, RADIUS and conditional access. That is why replacing it piecemeal is possible and replacing it wholesale is not.
Why do people leave JumpCloud?
Usually over the unit or the extras. It is priced per user only, which is the wrong shape for shared devices and kiosks, premium support is a $2.00 per user add-on, and the packages are described rather than itemized against the a la carte features.
Can I replace only part of JumpCloud?
Yes. JumpCloud sells its features individually, so an organization can keep the directory, SSO and MFA and move device management elsewhere, which is usually the smaller migration. The cost is that security policy is then maintained in two consoles instead of one.
Is Intune a replacement for JumpCloud?
For device management, yes, and it is included in Microsoft 365 E3 and E5. For the directory and single sign-on, Microsoft’s Entra ID is the equivalent; check which Entra ID plan your subscription includes before assuming it covers everything JumpCloud’s SSO tier does.
Is JumpCloud cheaper than Jamf?
For people carrying several Apple devices, usually. A hundred people with a Mac and an iPhone each is about $10,800 a year on JumpCloud’s Device Management package and $25,350 at Jamf’s list prices. Jamf’s Mac price includes Jamf Connect and Jamf Protect.
What JumpCloud alternative suits shared devices?
A per device product. JumpCloud licenses users, so devices without a named user fit it poorly. Scalefusion publishes four tiers from $2 to $6 per device per month and Hexnode three tiers from $2.20 to $4.70.
Does any alternative include support in the price?
Addigy includes support on every plan at no additional cost, against JumpCloud’s $2.00 per user per month for premium support. Addigy manages Apple devices only, so the comparison holds for an all-Apple estate and not for a mixed one.
What is harder to move off JumpCloud, devices or the directory?
The directory. Devices re-enroll into a new MDM, and most organizations finish that in weeks. The directory carries every account, group, single sign-on application and LDAP or RADIUS consumer, and moving it is an identity migration with a company-wide password or MFA reset at the end.
What happens to Wi-Fi and VPN access if I leave?
JumpCloud provisions network access through cloud RADIUS, and no device manager on this page carries that. If you keep the directory, that job stays with it. If you move the directory, RADIUS has to be rebuilt somewhere before the old tenant is closed.
Why does Addigy have no score?
It is not on the MDM ranking here. This page adds no scores of its own, so it shows none rather than inventing one, and its prices come from its pricing page on this site.
Does this page compare identity providers?
No. No ranking on this site covers directories, single sign-on or identity and access management platforms, so this page names the gap and the vendors readers ask about rather than listing products it has not priced.
Where do these scores and prices come from?
Scores are the ones each product already holds on the MDM ranking. Prices come from each vendor’s pricing page as published on this site, read on September 10 and 11, 2026. JumpCloud product names come from its own platform menu.
Keep comparingRelated rankings
- Best Patch Management Software, and What Each One Reaches Seven tools, one 40 point rubric, every subscore published. Check the Windows Autopatch you may already own, t...
- Ivanti Alternatives, by Which Ivanti You Are Leaving Ivanti is LANDESK, HEAT, MobileIron and Pulse Secure under one name, sold across endpoint management, IT servi...
- Atera Alternatives, and Why There Is No Half to Keep Atera is one product on one database, which is why people choose it and why leaving is all or nothing. It is a...
- ConnectWise Competitors, and the Half You Can Leave ConnectWise tops its ranking at 8.5, so nobody leaves it because it cannot do the job. They leave over price o...
- NinjaOne Competitors, and Why One of Them Is Not Leaving NinjaOne is the deepest endpoint management in its ranking, and its own site now publishes a PSA as well. So m...
- Best PSA Software, and Why a Ticketing System Is Not One Seven platforms, one 40 point rubric, every subscore published. A ticketing system tracks work; a PSA turns tr...