Skip to main content
Solved

Jamf Pro Entra Integration

  • October 28, 2024
  • 3 replies
  • 31 views

jaypee
Forum|alt.badge.img+5

During integration of Jamf Pro with Entra, a Global Administrator account is needed and this account must exist on the Entra tenant. Often, we use the same account to set up the app registrations for Jamf Connect and to create the various changes for conditional access exemptions, etc.

Once these are set up, can this Global Administrator account be safely removed from Entra without affecting any of the integrations or applications created?

Best answer by jaypee

Confirmed with Jamf Support that once the integrations have been set up, the account is no longer needed.

3 replies

Forum|alt.badge.img+2

The global administrator account used for setup must remain active. In most cases, with SSO using Entra, deactivating this account will cause unauthorized access issues during sync. A generic admin account can be used instead of a named account.


jaypee
Forum|alt.badge.img+5
  • Author
  • New Contributor
  • October 29, 2024

Thank you. Is this documented somewhere?


jaypee
Forum|alt.badge.img+5
  • Author
  • New Contributor
  • Answer
  • October 30, 2024

Confirmed with Jamf Support that once the integrations have been set up, the account is no longer needed.