Jamf Connect Verify Menu Items

When launched, Jamf Connect Verify displays an icon in the menu bar. Users can access Jamf Connect Verify's menu items by clicking the icon images/download/thumbnails/60752002/JC_MenuLogo.png . Administrators can customize or hide the displayed menu items with a configuration profile written to the following preference domain:

com.jamf.connect.verify

Menu items include the following:

  • Sign In

  • Kerberos Tickets

  • Get Software

  • Preferences

  • Quit

Note: You can also include a custom action menu item. For more information, see the Configuring Action Menu Items section of this guide.

Sign In

Users must sign in to enable Jamf Connect Verify and access other menu items.

images/download/attachments/60752002/JC_VerifyLoginScrn.png

After a user enters their identity provider (IdP) credentials and clicks Sign In, the network and local authentication process is initiated.

Kerberos Tickets

Kerberos Tickets allows users to manually obtain Kerberos Tickets, if a Kerberos realm is configured. If the user has active Kerberos tickets, the Jamf Connect Verify menu bar icon will be green.

Get Software

Get software launches a self-service application, such as Jamf Self Service, Munki’s Managed Software Center, or LanRev’s self-service application. Administrators can use either Jamf Connect Verify's built-in detection of these services, or they can specify an app, webpage, or script to launch with a preference key.

Preferences

Preferences displays a menu with the most useful settings used with Jamf Connect Verify.

images/download/attachments/60752002/JC_Verify_Preferences.png

You can set the following in the preferences menu:

  • Identity Provider–Your organization's cloud identity provider (IdP), which is used for authentication. Azure, PingFederate and Custom are currently supported.

  • Client ID –Your OpenID Connect (OIDC) client ID (also known as the application ID in Azure environments).

    Note: If using Jamf Connect Login, you can use the same client ID for both apps.

  • Redirect URI–"https://127.0.0.1/jamfconnect" is used by default

  • Change URL–Webpage used for changing passwords

  • Reset URL–Webpage used for resetting passwords

  • Kerberos Realm–Your organization's Kerberos Realm

  • Client Secret–Client secret for ROPG operations

  • Discovery URL–A custom URL that stores your IdP's OIDC configuration settings.

    Note: This preference is only required for administrators using the "Custom" Identity Provider option.

  • Get Kerberos Tickets Automatically–Enables Jamf Connect Verify to automatically get Kerberos tickets on a specified interval

  • Check Network Account Automatically–Enables Jamf Connect Verify to automatically verify the network account on a specified interval

  • Ignore Local Password Verify–Ignore local password verification

    Note: Enabling this setting only for testing purposes is recommended.

  • Force Sign In Window–Keeps the sign in window open until the user has successfully authenticated.

  • Show Password Expiration Countdown–Displays a countdown of days remaining until the user's password expires

  • Fail Tool Path– Path to a custom tool to use on password failure

All preferences can be forced into specific settings by applying configuration profiles. If a setting is configured with a configuration profile, the Preferences menu does not allow the user to change that particular setting.

Note: Client ID is the only required preference. Jamf Connect Verify will automatically display the Preferences menu if the Client ID is not configured.

Quit

Quit exits Jamf Connect Verify. This item can be hidden from the user.

Related Information

For related information, see the following sections of this guide:

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2019 Jamf. All rights reserved.