Jamf Teacher Integration with Jamf Pro

When integrated with Jamf Pro, Jamf Teacher allows teachers to manage student devices in the classroom using the classes and lessons features:

  • ClassesClasses are groups of students assigned to a teacher that the teacher can manage. Assigned classes are classes created in Jamf Pro that are assigned to the teacher. These classes appear on the Jamf Teacher dashboard.
  • LessonsLessons allow teachers to configure which apps, websites, resources, and built-in apps students can use during lessons such as Math or English, ensuring students only access apps and websites that are related to the subject they are currently learning. When creating lessons, teachers can also add lesson resources such as websites, Google Drive, or Dropbox. Lesson resources are available to students while the lesson is active.

Integrating Jamf Teacher with Jamf Pro allows administrators to limit the management capabilities of Jamf Teacher by doing the following:

  • Configure how long Jamf Teacher restrictions can be set on student devices

  • Configure the time at which restrictions applied by Jamf Teacher end

  • Remove restrictions set by Jamf Teacher using the "Remove restrictions set by Jamf Teacher" mass action or remote command

Note:

If a Jamf Pro administrator and Jamf Teacher both set restrictions on the same student's device, the student's device will accept the most restrictive settings. Restrictions are set via mobile device configuration profiles created in Jamf Pro.

To integrate the Jamf Teacher app with Jamf Pro, you must enable the app and configure its settings in Jamf Pro. Then you can distribute the Jamf Teacher app to teachers.

Configuring Jamf Teacher Settings in Jamf Pro

Requirements
  • A Jamf Pro user account with read and update privileges for Jamf Teacher

  • (On-premise only) A valid SSL certificate obtained from a third-party vendor (For more information, see SSL Certificate in the Jamf Pro Documentation.)

  • (On-premise only) Allow secure inbound connections from "student-api.services.jamfcloud.com"

  • Students and teachers assigned to supervised devices

  • Classes created in Jamf Pro (For more information, see Classes in the Jamf Pro Documentation.)

  1. In Jamf Pro, click Settings in the top-right corner of the page.
  2. In the Jamf Applications section, click Jamf Teacher .
  3. Click Edit .
  4. Select Allow limited management of students' devices by Jamf Teacher.
  5. (Optional) Choose how long teachers can restrict student devices from the Maximum Restriction Time pop-up menus.
  6. (Optional) Choose the time at which all restrictions set by Jamf Teacher are cleared from student devices from the Restrictions End Time pop-up menus, and then do the following:
    1. Choose the region in which Jamf Teacher time restrictions are cleared from the Region pop-up menu.

    2. Choose the time zone in which Jamf Teacher time restrictions are cleared from the Time Zone pop-up menu.

  7. Click Save .

Configuring and Distributing the Jamf Teacher App

To distribute the Jamf Teacher app to teachers, you must create a managed app configuration. The managed app configuration allows teachers to use the app without logging in.

Managed app configuration is a set of key-value pairs used to configure iOS applications. You can use managed app configuration to configure and customize Jamf-managed apps for your organization.

Note: If optional key-value pairs are not used, the app's default settings are used.

For more information or to generate a managed app configuration, see the AppConfig Community website: AppConfig for iOS.

Requirements

To use Jamf Teacher with Jamf Pro, teachers need a mobile device with iOS 11 or later.

  1. In Jamf Pro, click Devices at the top of the sidebar.
  2. Click Mobile Device Apps in the sidebar.
  3. Click New .
  4. Select App Store app or apps purchased in volume and click Next.
  5. Enter the name of the app, choose an App Store country and click Next. Then click Add for the app you want to add.
  6. On the General tab, ensure that the Make app managed when possible checkbox is selected.
  7. Use the Scope, Self Service, and Managed Distribution tabs to configure app distribution settings as needed.
  8. Click the App Configuration tab and enter the following in the Preferences field:
    <dict>
      <key>action</key>
      <string>updateToken</string>
      <key>device</key>
      <dict>
        <key>UDID</key>
        <string>$UDID</string>
      </dict>
      <key>apiUrl</key>
      <string>$DAS_URL</string>
      <key>jamfProAuth</key>
      <dict>
        <key>jamfProUrl</key>
        <string>$JPS_URL</string>
        <key>authCode</key>
        <string>$OAUTH_AUTH_CODE</string>
        <key>appConfigReinstallCode</key>
        <string>$APP_CONFIG_REINSTALL_CODE</string>
      </dict>
    </dict>
    
  9. Click Save .
The app is distributed the next time mobile devices in the scope contact Jamf Pro. If users were added as targets to the scope, the app is distributed to the devices those users are assigned to the next time the devices contact Jamf Pro.
Note:

If the user assignment is changed on a device with Jamf Teacher installed on it, you must redistribute the app to that device with Jamf Pro.

For more information about the Jamf Teacher user experience, see the Jamf Teacher Guide for Teachers.