How do I set up Jamf Pro SSO through JumpCloud SAML?

Question

My company has been using Jamf Pro to manage iPads for several years. I’m trying to get our Jamf Pro account configured with SSO using JumpCloud SAML and I have a few questions.

First of all, I’m new to jamf and not too familiar with the nomenclature. I have an account in our Jamf Pro subscription but not in Jamf Account (apparently). I created a Jamf Account but it doesn’t seem to be connected to our Jamf Pro subscription in any way. I’m assuming that the Jamf Account is some umbrella account that manages all the other Jamf subscriptions (education, pro, etc.) Is a Jamf Account necessary if we only have a Jamf Pro subscription?

If I’m reading the docs correctly, SAML is the deprecated way of managing user logins for Jamf Pro and we’re supposed to use OIDC from our Jamf Account account. Is that correct? We are not looking to do anything fancy through SSO, I just want to manage my employee’s Jamf Pro accounts. We’re not building apps or anything else that need OIDC.

Can I just use SAML SSO from our Jamf Pro account and not worry about the Jamf Account account?

zkkt1446 · Accepted Answer

If you only need SAML SSO for Jamf Pro, a Jamf Account is not required. You can set up SAML SSO directly with your IdP by mapping Jamf Pro user accounts.

When I reached out to Jamf support, they linked our details and issued a Jamf Account for us. A Jamf Account is helpful for managing contract and subscription information for products like Jamf Pro. Additionally, configuring SSO through a Jamf Account streamlines management if you decide to introduce other Jamf products in the future.

zkkt1446 · Answer

I’m also a bit confused about the difference between a Jamf Account and a Jamf Pro account. If we only use Jamf Pro, is the Jamf Account still required for SSO?

Also, can we continue using SAML with JumpCloud, or is OIDC now required for Jamf Pro login management?

If you only use Jamf Pro, a Jamf Account is not required for SAML SSO. However, OIDC SSO requires a Jamf Account (whether configured via Jamf ID or your own IdP).

You should consult official Jamf channels to determine whether continuing with SAML is sufficient for your long-term needs.

My understanding is that OIDC is Jamf's recommended method, as features like Blueprints and compliance functionality cannot be used without it.

Sign up

Login with SSO

Login to the community

Login with SSO