Setting Up Google Sign-In in Jamf School

If your school's students and staff have Google account credentials, you can have them authenticate to their device during enrollment using their credentials. You can require authentication during enrollment by creating an Automated Device Enrollment profile (DEP profile) with the Require authentication for enrollment checkbox enabled. For more information, see Automated Device Enrollment.

Before configuring Google Sign-In in Jamf School, you must create a Google API Console project. After the project is created, you can configure the Google Sign-In settings in Jamf School.

Requirements

To set up Google Sign-In in Jamf School, you need

  • Mobile devices with iOS 13 or later and iPadOS 13 or later

  • Computers with macOS 10.15 or later

  • A server token file from Apple School Manager in Jamf School (For more information, see Integrating Jamf School with Apple School Manager.)

  • (Automated Device Enrollment only) An Automated Device Enrollment profile (DEP profile) for iOS, iPadOS, and macOS devices (For more information, see Automated Device Enrollment.)

  • (On-device enrollment or User Enrollment only) A User Enrollment profile (DEP profile) for iOS, iPadOS, and macOS devices with authentication enabled (For more information, see User Enrollment and On-Device Enrollment.)

Creating a Google API Console Project

  1. Navigate to https://console.developers.google.com/projectcreate.

  2. Enter a name in the Project name field.

  3. Choose your organization in the Location field by clicking BROWSE.

  4. Use the OAuth consent screen payload to configure the user consent screen, including "jamfcloud.com" in the Authorized domains field.

  5. Click the Credentials payload, and then chose "OAuth client ID" from the Create credentials pop-up menu.

  6. For the Application type, select Web application.

  7. Enter the full URL for your Jamf School server followed by "/onboarding/oauth" in the Authorised redirect URIs field. For example: https://schoolname.jamfcloud.com/onboarding/oauth

  8. Copy and save the client ID and client secret from the OAuth client pop-up dialog.
    The client ID and client secret are used to configure Google Sign-In in Jamf School.

  9. Click OK.

Configuring Google Sign-In in Jamf School

  1. In Jamf School, navigate to Organization > Settings > Authentication.

  2. Choose "Google" from the Authentication Method pop-up menu.

  3. Configure additional settings as needed, including the client ID and client secret that you saved when creating the Google API Console project.

Copyright     Privacy Policy     Terms of Use     Security
© copyright 2002-2020 Jamf. All rights reserved.