Skip to main content

Hi, First time poster here.

We have a fleet of student iPads that we're managing through Jamf, and that have Microsoft Teams deployed on them for classwork.

The students have learned that, if they tap "+ Add Account" within Teams, they can connect a personal Teams account within the app, and have been using this to send notes in class without oversight.

We've been able to limit the Windows Desktop Teams App so that it'll only allow accounts on a specific Teams "tenant ID" to sign in - and we're hoping that a similar capability is possible in the iOS Teams app via Jamf, but have had trouble finding any information about it.

Is this something that anyone has managed to accomplish, or has advice about?   I'm relatively new to Jamf, so step-by-step guides are greatly appreciated.

Is this still working for people as I cant get it working?

Is this still working for people as I cant get it working?


@ashleyfound - Yep, working like a charm.  What does your app config look like?

So its the same as the one above however we have 2 configs as there are 2 domains. When it was pushed out it just said $email as the account and when you click add account it doesn't let you log in with the domain specified.

So its the same as the one above however we have 2 configs as there are 2 domains. When it was pushed out it just said $email as the account and when you click add account it doesn't let you log in with the domain specified.


@ashleyfound, 


"$EMAIL" is an MDM variable.  The app config is replacing "$email" with the email address of the device's assigned user.  Is the iPad you're using to test assigned to a valid domain user with an email address on their Jamf user account?

@palmna Yes the user does have a valid email address on jamf user account. It just displays $email as the account when I open Teams. If I go to use another account then the domain is filled in but when I add the username it tells me your organisation only allows managed accounts to sign in

@ashleyfound, can you post your app config?

This is my config. Have replaced the correct domain from config for this post but domain is correct


<plist>
<dict>
<key>domain_name</key>
<string>domain</string>
<key>IntuneMAMAllowedAccountsOnly</key>
<string>Enabled</string>
<key>IntuneMAMUPN</key>
<string>$EMAIL</string>
</dict>
</plist>

This is my config. Have replaced the correct domain from config for this post but domain is correct


<plist>
<dict>
<key>domain_name</key>
<string>domain</string>
<key>IntuneMAMAllowedAccountsOnly</key>
<string>Enabled</string>
<key>IntuneMAMUPN</key>
<string>$EMAIL</string>
</dict>
</plist>


Try this instead:


<dict>
<key>IntuneMAMAllowedAccountsOnly</key>
<string>Enabled</string>
<key>IntuneMAMUPN</key>
<string>$EMAIL</string>
</dict>

 

I still get $EMAIL. Is there anything else I need to do prior?

I have Jamf Pro - this is the exact string we use, which does work.  Are you using Pro or School version - might be different in School, as it is based on Zuludesk, not native Jamf code?

 

<dict>

    <key>IntuneMAMAllowedAccountsOnly</key>

  <string>Enabled</string>

   <key>IntuneMAMUPN</key>

    <string>$EMAIL</string>

</dict>

 

One other thing you might find useful:

 

I added Teams twice to my Jamf.  The first I scoped to staff only (and gave it a new name "Teams for Staff"); the other I scoped to students. Jamf lets you have two records for the same app (first time by clicking the "new" button on the mobile device apps page on Jamf; second time via a purchase in Apple School Manager) .  

 

I added the configuration above just on the student version. This allows staff to have accounts across multiple tenants; students on just the tenant associated with their school email.

 

Hope that helps.

 


 


This is my config. Have replaced the correct domain from config for this post but domain is correct


<plist>
<dict>
<key>domain_name</key>
<string>domain</string>
<key>IntuneMAMAllowedAccountsOnly</key>
<string>Enabled</string>
<key>IntuneMAMUPN</key>
<string>$EMAIL</string>
</dict>
</plist>


I notice you have added extra plist operators - please remove those and replace the entire string exactly as below. 

Also please make sure the full (real, not a variable) email address field is filled in here for the user:



 

I am using jamf school so maybe that is the issue. It told me it needed plist when I added your code.

I am using jamf school so maybe that is the issue. It told me it needed plist when I added your code.


Ah annoying, yes they are different products with a similar skin on top. Hopefully there will be a Jamf School user in the thread who can screenshot their configu.  Also if you raise it with Jamf you now have proof from the feature works perfectly for Pro - might be a product issue.  Good luck - please keep us posted how you get on. 

I still get $EMAIL. Is there anything else I need to do prior?


Hi,

I have Jamf Pro - this is the exact string we use:


IntuneMAMAllowedAccountsOnly
Enabled
IntuneMAMUPN
$EMAIL


One other thing you might find useful:

I added Teams twice to my Jamf. The first I scoped to staff only (and gave it a new name "Teams for Staff"); the other I scoped to students. Jamf lets you have two records if you add the app manually the second time.

I added the configuration above just on the student app. This allows staff to have accounts across multiple tenants; students on just the tenant associated with their school email.

Hope that helps.

[cid:6780ec54-3ba2-43dd-871d-65078dee5f11]

[Langley Grammar School logo] <> [Langley Grammar Ofsted Outstanding School] <> [TSH Berkshire logo] <> [Apple Distinguished School Langley Grammar] <>

[Langley Grammar School Twitter logo]Follow us on LGS_News Twitter <>


Tara McBride
Staff
TaraMcBride@lgs.slough.sch.uk

Langley Grammar School
Reddington Drive
Langley
Berkshire SL3 7QS
01753 598 300
https://www.lgs.slough.sch.uk

Langley Grammar School is a charitable company limited by guarantee registered in England and Wales. Registered Number: 7536795. Registered Office: Reddington Drive, Langley, Berkshire, SL3 7QS

Disclaimer

Disclaimer: You should be aware that all e-mails received and sent by Langley Grammar School are subject to the Freedom of Information Act 2000 and therefore may be disclosed to a third party. The information contained in this message or any of its attachments may be privileged and confidential and intended for the exclusive use of the addressee. The views expressed may not be official policy but the personal views of the originator. If you are not the addressees any disclosure, reproduction, distribution, other dissemination or use of this communication is strictly prohibited. If you received this message in error please return it to the originator and confirm that you have deleted all copies of it.


All messages sent by this organisation are checked for viruses using the latest antivirus products. This does not guarantee a virus has not been transmitted. Please therefore ensure that you take your own precautions for the detection and eradication of viruses

@ashleyfound, Ohhh, you're using Jamf School.  Sorry if you said that already, and I completely missed it.  Jamf School uses different variables. According to this: https://learn.jamf.com/en-US/bundle/jamf-school-documentation/page/Payload_Variables.html, you need to change $EMAIL to %Email%

I am using jamf school so maybe that is the issue. It told me it needed plist when I added your code.


@ashleyfound,


Sorry for not catching that sooner; I didn't realize you were using Jamf School.  The variables are different in Jamf School vs Jamf Pro.  According to Jamf's documentation: https://learn.jamf.com/en-US/bundle/jamf-school-documentation/page/Payload_Variables.html, you'll need to change $EMAIL to %Email%

@ashleyfound 


Sorry for the confusion; I didn't catch earlier that you're using Jamf School.  You'll need to use a different variable.  According to the Jamf School documentation https://learn.jamf.com/en-US/bundle/jamf-school-documentation/page/Payload_Variables.html, you'll need to change $EMAIL to %Email%.


 

HAHA, every time I view this page, Chrome (or my Grammarly extension) posts another draft from yesterday.  WTH!? 🤣.  I'll stop coming here...sorry everyone.

Reply


Terms & ConditionsCookie settings