Hi everyone, I've been tasked with researching an identity provider for our upcoming hybrid cloud setup. We're a mid-sized team, currently using a mix of on-prem AD for file servers and Azure for some SaaS apps. The goal is to unify management.
The shortlist has come down to JumpCloud and Microsoft Entra ID (formerly Azure AD). I've read the high-level marketing, but I'm trying to piece together the real-world operational differences.
My main questions are around practical day-to-day and cost:
* **Unified management:** Both seem to handle user provisioning across cloud and on-prem. For those who've used both, how does the single pane of glass *actually* compare? Is JumpCloud's cross-platform agent (for managing Mac/Linux policies) truly its killer feature versus Entra's deep Windows/Office suite integration?
* **Cost scaling:** Entra ID pricing is tied to the Microsoft ecosystem. JumpCloud's per-user pricing seems straightforward, but I've heard add-ons can stack up. For a hybrid environment with ~150 users, a mix of Windows, Mac, and Linux devices, and core needs being SSO, device management, and on-prem AD sync, which model tends to be more predictable?
* **Integration workflows:** We use G Suite, GitHub, AWS, and a handful of other non-Microsoft services. How cumbersome is it to integrate these with Entra ID compared to JumpCloud's directory-as-a-service approach? I'm particularly curious about the configuration effort for SCIM provisioning.
* **Migration path:** Since we have an existing on-prem AD, how do the migration and coexistence stories differ? Is one notably smoother for a phased rollout?
I'm leaning towards a clean, cloud-native directory, but the entrenched position of Microsoft is hard to ignore. Any insights on pitfalls or "I wish I'd known" moments for either platform in a hybrid context would be hugely appreciated.