We have all our Users Synced from ASM. Pupils will bring their own iPads from August. These will not be Supervised but we would like them all to enrol in JAMF.
Is there anything that could be done during Enrollment that would automatically associate the device with the correct User so that we can use JAMF Student?
Best answer by GregBobbett
Fore-warning, the answer below is from Jamf’s AI assistant… But my read through feels like it’s pretty accurate to my understanding of BYOD enrollment and Jamf School syncing with ASM.
FWIW, we are 100% school owned devices, SIS uploaded to ASM for Managed Apple Accounts syncing one-way to Jamf School and using on-device enrollment.
****************************
User Enrollment uses a student’s Managed Apple Account (from ASM) as the authentication mechanism. When a student enrolls their own iPad, they sign in with their Managed Apple Account — and Jamf School automatically links the device to that user record.
The enrollment process from the student’s perspective is straightforward:
At the end of this process, the device is enrolled in Jamf School and automatically associated with that pupil's user account — no manual linking required.
Automatic user association via Managed Apple Account
Device is linked to the student's ASM user record at enrollment
Jamf Student app can be used
Student user accounts with login credentials are required
Device remains unsupervised
Limits some restrictions and payloads compared to supervised devices
MDM profile can be removable by the student
Students can unenroll their own device from Settings
Personal data is protected
Only school/institutional data is managed; personal data is untouched on unenrlolment
For Jamf Student to work fully, students need student user accounts with login credentials assigned to a student User group in Jamf School.
Tip: Consider creating a simple one-page guide for pupils to follow when they arrive in August. The enrolment steps are short, but having clear instructions will save a lot of time on the day.
The main trade-off to be aware of is that because these are personally owned, unsupervised devices, some of the more restrictive management capabilities won't be available — but for the purpose of running Jamf Student in a classroom, User Enrollment provides everything you need.
****************************
Here’s a list of the sources that the AI gleaned the above from:
Jamf Product Documentation
Jamf Knowledge Base Articles
+12Fore-warning, the answer below is from Jamf’s AI assistant… But my read through feels like it’s pretty accurate to my understanding of BYOD enrollment and Jamf School syncing with ASM.
FWIW, we are 100% school owned devices, SIS uploaded to ASM for Managed Apple Accounts syncing one-way to Jamf School and using on-device enrollment.
****************************
User Enrollment uses a student’s Managed Apple Account (from ASM) as the authentication mechanism. When a student enrolls their own iPad, they sign in with their Managed Apple Account — and Jamf School automatically links the device to that user record.
The enrollment process from the student’s perspective is straightforward:
At the end of this process, the device is enrolled in Jamf School and automatically associated with that pupil's user account — no manual linking required.
Automatic user association via Managed Apple Account
Device is linked to the student's ASM user record at enrollment
Jamf Student app can be used
Student user accounts with login credentials are required
Device remains unsupervised
Limits some restrictions and payloads compared to supervised devices
MDM profile can be removable by the student
Students can unenroll their own device from Settings
Personal data is protected
Only school/institutional data is managed; personal data is untouched on unenrlolment
For Jamf Student to work fully, students need student user accounts with login credentials assigned to a student User group in Jamf School.
Tip: Consider creating a simple one-page guide for pupils to follow when they arrive in August. The enrolment steps are short, but having clear instructions will save a lot of time on the day.
The main trade-off to be aware of is that because these are personally owned, unsupervised devices, some of the more restrictive management capabilities won't be available — but for the purpose of running Jamf Student in a classroom, User Enrollment provides everything you need.
****************************
Here’s a list of the sources that the AI gleaned the above from:
Jamf Product Documentation
Jamf Knowledge Base Articles
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
