Directory Bindings

You can add and manage the following types of directory bindings using Jamf Pro:

  • Microsoft's Active Directory

  • Apple's Open Directory

  • PowerBroker Identity Services (formerly called “Likewise”)

  • ADmitMac

  • Centrify

Adding a Directory Binding

  1. In Jamf Pro, click Settings in the top-right corner of the page.
  2. In the Computer Management section, click Directory Bindings .
  3. Click New .
  4. Choose the type of directory binding you want to add and click Next.
  5. Configure the directory binding using the tabs and options provided.

    The tabs and options provided match the ones in the third-party directory service software.

  6. (Active Directory and ADmitMac only) To create an account for users to log into their computer when it is connected to another network, select the Create mobile account at login checkbox.
    Note:

    An account synchronization tool such as Jamf Connect, NoMAD Pro, or Apple’s Enterprise Connect can be used to sync computers with the directory. For more information about Jamf Connect, see the Jamf Connect Documentation.

  7. Click Save .

Binding Computers to a Directory Service Using a Policy

You can bind computers to a directory service using a policy or a PreStage enrollment. For more information about how to bind a computer to a directory service using a PreStage enrollment, see Computer PreStage Enrollments.

Requirements

To bind computers to a directory service, you need a directory binding in Jamf Pro.

  1. In Jamf Pro, click Computers at the top of the sidebar.
  2. Click Policies in the sidebar.
  3. Click New .
  4. Use the General payload to configure basic settings for the policy, including the trigger and execution frequency.
  5. Select the Directory Bindings payload and click Configure.
  6. Click Add for the directory service you want to bind to.
  7. Use the Restart Options payload to configure settings for restarting computers.
  8. Click the Scope tab and configure the scope of the policy.
  9. (Optional) Click the Self Service tab and make the policy available in Self Service.
  10. (Optional) Click the User Interaction tab and configure messaging and deferral options.
  11. Click Save .

The policy runs on computers in the scope the next time they check in with Jamf Pro and meet the criteria in the General payload.