Skip to main content
Question

Use Active Directory Groups

  • January 23, 2023
  • 4 replies
  • 108 views

Forum|alt.badge.img+3

Looking to use Active Directory groups to populate smart user groups. We currently have SSO and Azure AD as a Cloud Identity Provider setup. Do I also need to add an LDAP server?

 

Thank you.

Kevin 

4 replies

Forum|alt.badge.img+3
  • Author
  • New Contributor
  • January 23, 2023

We're using Jamf Pro.


AJPinto
Forum|alt.badge.img+26
  • Legendary Contributor
  • January 23, 2023

JAMF cannot do make smart groups based on AD membership. If you need to do AD reporting that will need to come out of Azure. If you are trying to target something at an AD group that is possible. You target the policy/configuration profile to all devices/users and set an exclusion for the desired AD group. The wording is poor, but the exclusion means only users in that AD group will see the policy/configuration profile.

 

Yes you need a LDAP Server setup for JAMF to be able to search that domain. There is also some extension attributes you need to configure, and inventory collection stuff, nothing complicated.


A_Collins
Forum|alt.badge.img+11
  • Contributor
  • January 23, 2023

You can use limitations in scoping. Jamf can only read Azure group membership from there. You have to enter exact name I believe. 


Forum|alt.badge.img+1
  • New Contributor
  • May 11, 2023

JAMF cannot do make smart groups based on AD membership. If you need to do AD reporting that will need to come out of Azure. If you are trying to target something at an AD group that is possible. You target the policy/configuration profile to all devices/users and set an exclusion for the desired AD group. The wording is poor, but the exclusion means only users in that AD group will see the policy/configuration profile.

 

Yes you need a LDAP Server setup for JAMF to be able to search that domain. There is also some extension attributes you need to configure, and inventory collection stuff, nothing complicated.


Clarification needed; LDAP Server Setup on Top of the Azure Cloud Connection?