Google Sign-In Setup

If your school's students and staff have Google account credentials, you can have them authenticate to their device during enrollment using their credentials.

Before configuring Google Sign-In in Jamf School, you must create a Google API Console project. After the project is created, you can configure the Google Sign-In settings in Jamf School.

General Requirements

To set up Google Sign-In in Jamf School, you need

  • Mobile devices with iOS 13 or later, or iPadOS 13 or later

  • Computers with macOS 10.15 or later

  • A server token file from Apple School Manager in Jamf School (For more information, see Apple School Manager Integration.)

  • (Automated Device Enrollment only) An Automated Device Enrollment profile for iOS, iPadOS, and macOS devices with the Require authentication for enrollment checkbox enabled (For more information, see Automated Device Enrollment.)

  • (On-device enrollment or User Enrollment only) A User Enrollment profile for iOS, iPadOS, and macOS devices with authentication enabled (For more information, see User Enrollment and On-Device Enrollment.)

Creating a Google API Console Project

  1. Navigate to
  2. Enter a name in the Project name field.
  3. Choose your organization in the Location field by clicking BROWSE.
  4. Use the OAuth consent screen payload to configure the user consent screen, including "" in the Authorized domains field.
  5. Click the Credentials payload, and then chose OAuth client ID from the Create credentials pop-up menu.
  6. For the Application type, select Web application.
  7. Enter the full URL for your Jamf School server followed by "/onboarding/oauth" in the redirect URIs field. For example:
  8. Copy and save the client ID and client secret from the OAuth client pop-up dialog.
 The client ID and client secret are used to configure Google Sign-In in Jamf School.
  9. Click OK.

Configuring Google Sign-In in Jamf School

  1. In Jamf School, navigate to Organization > Settings > Authentication.
  2. Choose Google from the Authentication Method pop-up menu.
  3. Configure additional settings as needed, including the client ID and client secret that you saved when creating the Google API Console project.