Im testing Jamf/Entra Device Compliance. Everything is working as expected (Smart Groups, compliant/non-compliant criteria, Entra/Intune connector, etc). Now its time to focus on the actual registration workflow and policy logic to make it as painless as possible for my users.
Does anyone have a customize workflow that improves the registration user experience? Popping up the Company Portal auth UI is not an elegant way to register our employees.
🙏🏻
Solved
Ideas on how to improve the Jamf/Entra Device Compliance registration user experience?
+19Best answer by dortmund50
You won't have many options for registering devices in Entra.
However, what might help is to simplify the registration process a bit. To do this, I created an additional config profile and enabled WkWebView using the following instructions:
Here's what my configuration looks like:
Custom Settings Payload → Preference Domain field: com.jamf.management.jamfAAD
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>disableUPNLoginHint</key>
<true/>
<key>useWKWebView</key>
<true/>
</dict>
</plist>
Maybe that helps a bit :)
+26We wait for the JamfAAD plist to hit at enrollment before launching the a policy to start the registration process prompt (custom osascript to prompt user to click a “Register” button). Once that button is clicked, it runs a custom trigger to set the conditional access policy for that computer to register with Entra.
Simple. Clean. Works.
Then again, we do not have a ton of applications installing at enrollment - our users time to desktop is < 3 minutes in most cases.
+26Or just go PSSO and allow it all to just work at that point 😊
+6You won't have many options for registering devices in Entra.
However, what might help is to simplify the registration process a bit. To do this, I created an additional config profile and enabled WkWebView using the following instructions:
Here's what my configuration looks like:
Custom Settings Payload → Preference Domain field: com.jamf.management.jamfAAD
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>disableUPNLoginHint</key>
<true/>
<key>useWKWebView</key>
<true/>
</dict>
</plist>
Maybe that helps a bit :)
+19Thank you. I actually created this profile earlier today. Will be testing soon. 👍🏻
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.