For the first time, users were dictating the device, and how it was interacting with the network. I believe that this showed Apple a shift was happening in the enterprise. The first step was C-level executives demanding IMAP enabled on their Exchange servers (iPhone OS didn’t support Exchange until 2.0). It was the first thing you interacted with, and everything was tied to that system. A decade ago in IT, everything was about Active Directory. I’ve written extensively about the problem of identity management in the enterprise here at 9to5Mac, and this announcement was a breath of fresh air. Add an application-specific claim to the Jamf Pro app to create a custom attribute that will provide the user's shortname.Last fall, I wrote about the announcement with Jamf and Microsoft where Microsoft Azure Active Directory would be added as an authentication plugin for macOS developments.Ensue the Jamf Pro Azure app is assigned to the users/groups for those people who will be using Macs in your environment.Please provide the 'App Federation Metadata' URL to the engineer.A dataJAR engineer will provide you with the 'Identifier' and 'Reply' URLs.Follow the steps in the following article, up to but not including 'Configure SSO in Jamf Pro':.Please ensure the steps in the following article are completed beforehand: Requirements for connecting Jamf Pro to Azure AD over LDAPS Technical Details Requirements / DependanciesĪn LDAP/S connection to Azure AD is required to work along side the SSO integration.

Using SSO during enrolment allows you to require your users to use MFA when they authenticate. This allows SSO user authentication during enrolment using Enrolment Customisation (macOS 10.15+) and the Self Service app, as well as assignment of devices and integrations into Apple School/Business Manager. It is possible to link your Jamf Pro / datajar.mobi instance to your Azure AD over SSO.

What is jamf active directory