Skip to main content
Question

Unable to use Single App Mode

  • September 18, 2025
  • 6 replies
  • 62 views
chris.bates
Forum|alt.badge.img+1

Hey all, 

 

Wondering if anyone has any ideas on this?

 

I am wanting to utilise SAM to lock down our iPads to a specific app. Trying to scope this through a department group but the device isn’t showing in the logs for the configuration profile. There are devices in there, just not the two that I specifically need. Both devices that aren’t showing in the logs are supervised and managed institutionally so unsure on what the issue is here… I have also checked to see if I can manually add the two devices but they are not showing when I try to search for them? Getting increasingly confused as the devices that are showing scoped currently, and are in the profiles logs, are NOT supervised...

    6 replies

    Chubs
    Forum|alt.badge.img+21
    • Chubs
    • Jamf Heroes
    • September 18, 2025

    So departments are either created automatically based on what you’ve created and what synchronizes from your IdP...OR you manually create them AND manually assign them to the devices.

    There’s nothing automated for the device to department, only user to department.  So if the user is in that department and went through enrollment customization where it assigns that device to them - then it should appear in that group.  Otherwise, you’ll need to manually assign that device to the department to get it into that group via “User & Location” under the device inventory tab.

    I find your lack of faith disturbing
    chris.bates
    Forum|alt.badge.img+1
    • chris.bates
    • Author
    • New Contributor
    • September 18, 2025

    So departments are either created automatically based on what you’ve created and what synchronizes from your IdP...OR you manually create them AND manually assign them to the devices.

    There’s nothing automated for the device to department, only user to department.  So if the user is in that department and went through enrollment customization where it assigns that device to them - then it should appear in that group.  Otherwise, you’ll need to manually assign that device to the department to get it into that group via “User & Location” under the device inventory tab.

     

    Yeah, so the devices have been manually added to the department group. Just wont pull through to the configuration profile. I have tried manually adding the 2 devices to the profile scope but no results found when trying to search for the hostname...

    Chubs
    Forum|alt.badge.img+21
    • Chubs
    • Jamf Heroes
    • September 18, 2025

    So departments are either created automatically based on what you’ve created and what synchronizes from your IdP...OR you manually create them AND manually assign them to the devices.

    There’s nothing automated for the device to department, only user to department.  So if the user is in that department and went through enrollment customization where it assigns that device to them - then it should appear in that group.  Otherwise, you’ll need to manually assign that device to the department to get it into that group via “User & Location” under the device inventory tab.

     

    Yeah, so the devices have been manually added to the department group. Just wont pull through to the configuration profile. I have tried manually adding the 2 devices to the profile scope but no results found when trying to search for the hostname...

    If they are confirmed scoped (group or direct) but not showing pending or anything in the logs (profile and/or device), then there’s something else at play here like an exclusion or something.  Without investigating your environment, there’s no telling.

    I find your lack of faith disturbing
    chris.bates
    Forum|alt.badge.img+1
    • chris.bates
    • Author
    • New Contributor
    • September 18, 2025

    So departments are either created automatically based on what you’ve created and what synchronizes from your IdP...OR you manually create them AND manually assign them to the devices.

    There’s nothing automated for the device to department, only user to department.  So if the user is in that department and went through enrollment customization where it assigns that device to them - then it should appear in that group.  Otherwise, you’ll need to manually assign that device to the department to get it into that group via “User & Location” under the device inventory tab.

     

    Yeah, so the devices have been manually added to the department group. Just wont pull through to the configuration profile. I have tried manually adding the 2 devices to the profile scope but no results found when trying to search for the hostname...

    If they are confirmed scoped (group or direct) but not showing pending or anything in the logs (profile and/or device), then there’s something else at play here like an exclusion or something.  Without investigating your environment, there’s no telling.

     

    So - no exclusions or limitations are in place on the config profile. 

    Here is what i see when trying to manually add the host to the scope:

    Screenshot of host department:

     

    One thing I have noticed is that the manual assignment screen only provides 26 devices for assignment instead of the 45 we have enrolled in Jamf. I have just created a new static device group and that is not showing in the scope assignment either? I am completely baffled...

    chris.bates
    Forum|alt.badge.img+1
    • chris.bates
    • Author
    • New Contributor
    • September 18, 2025

    Wow… I am silly. The config profile was scoped to EMEA site region instead of global policy. Resolved!

    Chubs
    Forum|alt.badge.img+21
    • Chubs
    • Jamf Heroes
    • September 18, 2025

    Wait, you get zero results when clicking on Add and “mobile devices”?  What if you recreate the configuration profile + payload?

    I find your lack of faith disturbing
    Terms & ConditionsCookie settingsAccessibility statement