Deployment

You can deploy Jamf Connect to computers using an MDM solution, such as Jamf Pro or Jamf School.

Before deploying Jamf Connect, you must do the following:

  • Integrate Jamf Connect with your cloud identity provider (IdP).

  • Obtain a Jamf Connect License.

  • Create a configuration profile for each Jamf Connect app used in your environment.

Deploying via Policy

  1. Upload the Jamf Connect PKG to Jamf Pro.

  2. Upload your Jamf Connect configuration profiles to Jamf Pro or use the Application and Custom Settings payload to configure settings.
    For instructions, see the Computer Configuration Profiles section in the Jamf Pro Administrator's Guide.

  3. Scope the configuration profiles to target computers.

  4. In Jamf Pro, click Computers at the top of the page.

  5. Click Policies.

  6. Click New.

  7. Use the General payload to configure basic settings for the policy

  8. Use the Packages payload to add the Jamf Connect PKG.

  9. (Optional) Use the rest of the payloads to configure the tasks you want to perform.

  10. Scope the policy to the same computers targeted by your Jamf Connect configuration profiles.

  11. Click Save.

The policy is distributed to computers in the scope the next time they contact Jamf Pro.

Deploying via PreStage Enrollment

  1. In Jamf Pro, click Computers at the top of the page.

  2. Click PreStage Enrollments.

  3. Click New.

  4. Configure the following PreStage Enrollment payloads:

    Payload

    Setting

    General

    Configure basic settings for the PreStage enrollment and customize the user experience of the Setup Assistant.

    If your Jamf Pro environment requires authentication from and LDAP server, select Require Authentication.

    If you are using Enrollment Customization configuration to enroll users and create local accounts with Jamf Connect, add your pre-configured Enrollment Customization configuration.

    For more information, see the Managing Jamf Connect and Enrollment Customization with Jamf Pro Technical Paper.

    Account Settings

    Select Skip Account Creation. Jamf Connect Login will create a local user account on the computer.

    Note: Jamf Connect does not create an MDM-enabled local user account. For more information, see the Enabling MDM for Local User Accounts Knowledge Base article.

    Confguration Profiles

    Select the configuration profiles you created for Jamf Connect.

    Enrollment Packages

    Select the customized Jamf Connect package you previously uploaded to your Jamf Pro cloud distribution point.

    Note: If using Jamf Pro 10.19 or later, you can include multiple packages. Packages with higher priority install first. Multiple packages with the same priority install in alphabetical order based on the package name.

  5. Click the Scope tab and configure the scope. The computers listed on the Scope tab are the computers that are associated with Automated Device Enrollment (formerly DEP) via the server token file (.p7m) you downloaded from Apple. You can use the Select All button to add all associated computers to the scope. This adds all computers associated with Automated Device Enrollment via the server token file regardless of any results that have been filtered using the Filter Results search field. The Unselect All button removes all associated computers from the scope.

    Note: If you want to automatically add computers to the scope as they become associated with the Automated Device Enrollment instance, select the Automatically assign new devices checkbox in the General payload.

  6. Click Save.

Computers in the scope will now be enrolled using the PreStage enrollment.

Deploying Jamf Connect with Jamf School

If using Jamf School, complete the following to deploy Jamf Connect:

  1. Upload Packages—Add the Jamf Connect packages you want to install on computers.
    For instructions, complete the "Adding In-House Content" procedure in the Distributing In-House Apps and Books section of the Jamf School Deployment Guide and Documentation.

  2. Upload Profiles—Upload your Jamf Connect configuration profiles and license file to Jamf School using the "Upload Custom Profile" option.
    For instructions, see Creating and Distributing Profiles in the Jamf School Deployment Guide and Documentation.

  3. Create a Smart Device Group—Create a smart device group that ensures Jamf Connect is only installed on computers that have the configuration profiles successfully installed first. When configuring the smart device group make sure you do the following:

    • In the Apps payload, add the Jamf Connect packages you want to install and select Automatic for the installation method.

    • In the Members payload, add the "Managed Profile (Installed)" criteria to your filter for each Jamf Connect configuration profile you have uploaded.

    For instructions, see Creating Device Groups in the Jamf School Deployment Guide and Documentation.

The group membership is displayed in the table below scope. Jamf Connect will be automatically installed on computers in the scope.

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2021 Jamf. All rights reserved.