MiDesktop Jump Account Creation & Setup

1. To request a MiDesktop jump account, please email [email protected] and provide the MCommunity group associated with at least one MiDesktop pool. New customers will be issued an account automatically.
2. Once the account is created, credentials will be securely shared and only available for 7 days.
3. Next, register the account as a U-M linked account. Open a web browser to the linked accounts page (requires VPN login) and click the Link New Account button. Add the account information and purpose, click Link Account, and accept the Duo push.
4. Next, register a Duo device for the jump account by clicking Manage Duo Devices. You will be redirected to U-M Weblogin. You must log in using your standard U-M account. Select the new jump account in the dropdown on the ‘Select Account to Impersonate’ page. Then click Impersonate and accept the Duo prompt. The account now has access to the MiDesktop jump server. See MiDesktop Jump Server Access for information about how to connect.
5. Once users have confirmed they are able to log in, they should visit the jump account password reset utility to change the password they were issued. When doing so, the name must be entered in this format: umroot\midesktop-[uniqname]. Save the credentials to a password management tool to avoid losing access.

Please Note:

• Accounts are only created for MiDesktop customers.
• This account only grants access to the MiDesktop jump server, which allows access to vCenter and the Horizon console. Use the standard uniqname/password credentials to access vCenter and Horizon.
• The account will be disabled by ITS IA after 90 days of inactivity, and deleted after 120 days. In order to keep your account current, please login in to the MiDesktop jump server at least once every 89 days. Once the account is disabled or deleted you must contact MiDesktop support to enable or recreate the account, which may delay access to your MiDesktop resources.