Skip to main content

I'm integrating with JAMF MDM to get mobile devices. I have a standard JAMF pro user created and assigned Auditor privileges(grant all read). I'm able to get device info with the following info under the security object.

"security": { "dataProtected": , "blockLevelEncryptionCapable": true, "fileLevelEncryptionCapable": true, "passcodePresent": true, "passcodeCompliant": true, "passcodeCompliantWithProfile": true, "hardwareEncryption": , "activationLockEnabled": true, "jailBreakDetected": false },

I have to capture the compliance info as well when I try to access compliance info using the following API call

BaseURL/api/v2/conditional-access/device-compliance-information/mobile/{deviceid}

it is showing null results. Please advise how can get the compliance status of the device. Do I need to get more privileges or can we capture from a security object?

Thanks.

mythdhr

Hi Kelvin
Did you find the solution for your problem.Does the api return only if intune is integrated with jamf pro

Couple of things to look at: Are you using the API hub as a guideline?

Are you able to pull any API information with your current permissions? I thought Jamf was doing away with some authentication methods that weren’t using API roles.

I would suggest setting up an API role/client and using a bearer token. Settings > System > API roles and clients. For conditional access checks, you need “Read Device Compliance Information”

Also, I show the path to be using v1 not v2:  /v1/conditional-access/device-compliance-information/mobile/{deviceId}

Let me know if you had any luck.

Hi drewcymek
/api/v1/conditional-access/device-compliance-information/mobile/{deviceId}
Does this API return the compliance status set by an external compliance vendor (such as Microsoft Intune) for Conditional Access, or does it return the compliance benchmark results from Jamf Pro?
Also, do Jamf Pro’s Compliance Benchmarks mark a device as simply COMPLIANT or NON_COMPLIANT?If it does which API I can use to pull this information

I’m not positive I fully understand what your goal is. If you are using Jamf device compliance integrated with a vendor. Compliance is set by Jamf alone. Jamf passes the compliance to the vendor - in this case Intune. The only thing Intune really does is receive compliance information and pass it along to CA policies.

 

The path way I provided is from Jamf’s API. This is the return from a device search. 

 

Terms & ConditionsCookie settings