JIT for Entra ID
Login into Microsoft Entra ID tenants with on-demand admin accounts.
Overview
When you have multiple Entra ID tenants your technicians need to access, you can leverage idemeum to automatically manage individual on-demand admin accounts. Technicians request admin accounts, login to do their business, and then after some time the accounts will be disabled and passwords rotated. You can request Entra JIT accounts from idemeum portal, or you can integrate our platform with your ticketing system, so that you request Entra JIT accounts right from customer support tickets.
Entra JIT login flow
Access from idemeum portal
- Navigate to the customer / organization admin portal
- Search for Entra ID application and click on
... - Now you can request JIT account and view provisioned credentials
Access from ticketing system
Check our integrations portal to see how to integrate idemeum with your ticketing system. In the example below technicians can request Entra ID accounts right from HaloPSA tickets.
Nik Pot
Chrome browser extension
Idemeum offers chrome browser extension that you can use to request Entra JIT account, view credentials, and autofill the credentials in a new incognito window.
- When account is disabled, the icon that is shown in the portal and extension is greyed out. You can click on
...and then request an account to be initially provisioned or re-enabled by clicking onRequest access.
- When account is active you can use browser extension to view credentials. Click on
...and then chooseView credentials.
- Idemeum browser extension also facilitates credential auto-fill, so that technicians do not have to manually copy paste credentials. All you need to do it to launch Entra ID application either from the portal or the extension itself. When the application launches, the credentials will be automatically filled.