> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stackone.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect JumpCloud with OAuth 2.0 (Service Account) – StackOne Hub

> Link a JumpCloud account in the StackOne Hub using OAuth 2.0 (Service Account). End-user guide to authorize the integration and start using JumpCloud actions.

<Warning>Only Admins with Billing role can create Service Accounts. Each Admin with Billing can create up to 40 Service Accounts.</Warning>

<section data-guide-section data-guide-scopes="">
  <h2>Creating a Service Account</h2>

  <p>Service Accounts provide OAuth 2.0 authentication for automated integrations without user intervention.</p>

  <Steps>
    <Step title="Sign in to JumpCloud Admin Portal">
      <div data-guide-step data-guide-scopes="" data-guide-display-scopes-list="">
        <p>Sign in to your <a href="https://console.jumpcloud.com/login" target="_blank" rel="noopener noreferrer">JumpCloud Admin Portal</a>.</p>

        <ul>
          <li>For EU region, use <a href="https://console.eu.jumpcloud.com/login" target="_blank" rel="noopener noreferrer">JumpCloud EU Portal</a></li>
        </ul>
      </div>
    </Step>

    <Step title="Navigate to Service Accounts">
      <div data-guide-step data-guide-scopes="" data-guide-display-scopes-list="">
        <p>In the Admin Portal, go to <strong>Settings</strong> > <strong>Service Accounts</strong>.</p>
      </div>
    </Step>

    <Step title="Create a New Service Account">
      <div data-guide-step data-guide-scopes="" data-guide-display-scopes-list="">
        <p>Click <strong>+ New</strong> to add a new Service Account.</p>

        <ul>
          <li>Enter a <strong>Name</strong> for the Service Account</li>
          <li>Select a <strong>Role</strong> from the dropdown menu (e.g., Administrator, Manager)</li>
          <li>Under <strong>Key Type</strong>, select <strong>Client Secret</strong></li>
        </ul>
      </div>
    </Step>

    <Step title="Configure and Activate">
      <div data-guide-step data-guide-scopes="" data-guide-display-scopes-list="">
        <p>Click the <strong>Configure</strong> button. A <strong>Configure Client Secret</strong> popup will be displayed.</p>

        <ul>
          <li>Select the duration of expiration from the <strong>Secret Lifetime</strong> dropdown menu</li>
          <li>Click <strong>Activate</strong> to create the Service Account</li>
        </ul>
      </div>
    </Step>

    <Step title="Copy Client Credentials">
      <div data-guide-step data-guide-scopes="" data-guide-display-scopes-list="">
        <p>Copy the <strong>Client ID</strong> and <strong>Client Secret</strong> and store them securely for use later.</p>

        <ul>
          <li>Credentials are only displayed at the time they're created</li>
          <li>Each Service Account has 2 Client Secrets for rotation</li>
          <li>You will be emailed 7 days before expiration</li>
        </ul>
      </div>
    </Step>
  </Steps>
</section>

<section data-guide-section data-guide-scopes="">
  <h2>Selecting Your API Region</h2>

  <p>JumpCloud operates in two regions. Select the region that matches your JumpCloud organization.</p>

  <Steps>
    <Step title="Identify Your Region">
      <div data-guide-step data-guide-scopes="" data-guide-display-scopes-list="">
        <p>Check the URL you use to access JumpCloud Admin Portal.</p>

        <ul>
          <li><strong>US Region</strong>: If you use `console.jumpcloud.com`</li>
          <li><strong>EU Region</strong>: If you use `console.eu.jumpcloud.com`</li>
        </ul>
      </div>
    </Step>
  </Steps>
</section>

<section data-guide-section data-guide-scopes="">
  <h2>Finding Your Organization ID (Optional)</h2>

  <p>The Organization ID is only required if you manage multiple organizations through JumpCloud's Multi-Tenant Portal (MTP).</p>

  <Steps>
    <Step title="When Organization ID is Needed">
      <div data-guide-step data-guide-scopes="" data-guide-display-scopes-list="">
        <p>Organization ID is required for Managed Service Providers (MSPs) using the Multi-Tenant Portal.</p>

        <ul>
          <li>If you only manage one organization, leave this field empty</li>
          <li>MSP Admins need the Organization ID to query specific client organizations</li>
        </ul>
      </div>
    </Step>

    <Step title="Locate Your Organization ID">
      <div data-guide-step data-guide-scopes="" data-guide-display-scopes-list="">
        <p>To find your Organization ID, navigate to your organization settings in the Admin Portal.</p>

        <ul>
          <li>Go to <strong>Settings</strong> in the Admin Portal</li>
          <li>Your Organization ID is displayed in the <strong>Organization Profile</strong> tab</li>
          <li>Format example: `5a1234567890abcdef123456`</li>
        </ul>
      </div>
    </Step>
  </Steps>
</section>

<div data-whitelabel-hide>
  <h2>Linking the Account from the Hub</h2>

  <Steps>
    <Step title="Navigate to the Hub">
      Use one of the three <a href="/guides/accounts-section#linking-accounts">Linking Account Methods</a> to access the Hub.
    </Step>

    <Step title="Fill out the fields">
      Fill out the following fields using details from your provider:

      <ul>
        <li><strong>Client ID</strong></li>
        <li><strong>Client Secret</strong></li>
        <li><strong>API Region</strong></li>
        <li><strong>Organization ID</strong> (Optional)</li>
      </ul>
    </Step>

    <Step title="Connect">
      <ul>
        <li>Click <strong>Connect</strong></li>
        <li>If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider's authorization flow.</li>
        <li>Once authorization is successful, you will see a confirmation popup</li>
      </ul>
    </Step>
  </Steps>

  <p>If the account linking is successful, you will see the newly linked account in your <a href="/guides/accounts-section">Accounts</a> page.</p>
</div>
