I want to utilize Platform SSO with JAMF and Entra as our IDP. I was able to test the microsoft SSO plugin, but I couldn't get platform SSO to work. My goal is to have the user log in with their Entra ID credentials and to have their passwords sync. Any help would be greatly appreciated.

Hello.Does anyone have any experience mapping custom attributes from Google Workspace into Jamf Pro. We are using Google Workspace as our Cloud Identity Provider, and I am trying to sync a custom attribute from Google to populate into the "Department" field in the Mappings editor.I've tried just about every combination of attributes I can think of to try and get the data to pull across correctly, but nothing is working. For reference, the exact thing I am trying to achieve is pulling data from a Custom Attribute called "jamf" with my users' department name, as the actual Department attribute in Google Workspace isn't providing the correct info from our HR system. But when I enter "jamf" as the attribute in the Department field in Jamf Pro, it returns "no value" after a test search. I've also tried "user.jamf", "jamfJamf" and what feels like dozens of other variants to no avail.Any thoughts?

Trying to create a script (python or bash) to push out in a policy via Jamf Pro to delete Google Chrome.app from a system. I've tried various scripts online (new to scripting sorry) and everything fails. I'm currently testing this script and trying to run it manually using bash chrome-uninstall.sh but it keeps saying command not found. What am I doing wrong? #!/bin/bash # Remove Chrome rm -rf /Applications/Google Chrome.app/ exit 0

Hi All,  We have an issue with students changing their background to a custom wallpaper after upgrading to ios 17. Students are doing this through focus mode. I can't find any restrictions to block this. Is there any way around this or a solution?Can anyone also confirm if they are having this issue too? Kind Regards,

HiI would like to use self service on iPadOs to be able to change between two configuration profiles.  it always seems to fail one it.  is there a way to use selfservice todo a group move instead. or am i one the right track already?

Our Dev team is looking at vr/ar for training. Does anyone know if JAMF will support it? or can it currently do that like its a mobile device?

Hello,I am in the process of testing the implementation of CIS v8 Benchmark for macOS and one issue that I am running into is that I cannot find the profile that allows for touch ID when logging into the computer after being locked. For reference, I created the baseline using Jamf Compliance Editor. I have gone through the profiles that were imported but can't seem to find the one that allows for this. Any help would be greatly appreciated. Thank you in advance!

Looks like Apple was hacked by IntelBroker. What are you guys' thoughts?    Wonder what implications the release AppleConnect-SSO will have. It has not been updated since 2016 per the docs, but I would not be shocked to learn that its foundation is very similar to more current tools like Apples Kerberos SSO extension and possibly PSSO. Knowing the code base would make these tools much easier to reverse engineer for exploitation.    Has Apple Been Hacked? June 2024 Breach Exposes Source Code, Hacker Claims (forbes.com)

Hello. I am in need of assistance on this. I have a ticket open with JAMF support but no answers yet. Here's an overview:On premise JAMF behind a firewall.• Conditional access connected to Intune and devices are enrolled in Intune.• Only laptops using conditional access. About 40-50. Recently updated to a Jamf cloud instance• We are un-enrolling devices from On Premise and re-enrolling in Jamf cloud.• Laptops would be last. We need to find a method to move from Conditional access to device compliance.I need to find out if there is a way to have BOTH conditional access and device compliance active in Azure/Intune. This way we could move devices slowly to cloud instance and register them with conditional access. Otherwise we have to pull the switch on all 40+ laptops at the same time and move them over, and enroll them all in Device compliance. Thanks for any information!

New Jamf Admin here I have recently pushed a Firefox update for version 126.0.1 and am getting a lot of reports that Firefox doesn't open back up after updating. The app refuses to open and the only fix is reinstalling the app again. I'm not pushing the app with the configuration profile option selected. Does anyone know why this would be happening?

Hello Team,I am deploying the Nexthink collector v24.5.1.23, I did repackage it, and if I install manually by double clicking on it, then it works fine, but when I am deploying through a JAMF policy it is failing saying that " Installation failed. The package could not be verified." But the same way I am deploying the previous version v23 and it is working fine, where is the issue and how to fix it?

Looking for ways to push OS updates to users i tried nudge way to hard to setup for a novice user, so i tried the JAMF Pro software update and i get the ScheduleOSUpdate Missing 'ProductKey' error every time i try a Minor or Major update any other way to push the updates? or fix this error

Safeguarding personal information is a fundamental commitment to which we adhere at Jamf. Safeguarding isn’t just securing the data entrusted to us, but also maintaining compliance with various privacy laws and regulations. In our efforts to demonstrate our commitment, we are providing you all with the following important updates:   Jamf is proud to participate in the Student Privacy Pledge, and we’ve updated our Privacy Notice to reaffirm our commitment to the Student Privacy Pledge and to further clarify the third parties we use to process personal information. These updates include reinforcing our dedication to protecting student privacy by ensuring all practices align with the highest standards of data protection and transparency, as well as providing more detailed information about the types of customer data we collect, how it is used, and the third parties involved in processing this data. Additionally, we have added information to our Privacy Notice on how we communicate br

Hello everyone,Using JAMF Trust or any other solution, I try to block all comunications except HTPP/HTTPS.But I don't see any possible option on security cloud.Using a configuration profile, I can only block applications.Does anyone or a JAMF expert have any ideas?Thanks for your help

Hi,I have set the Configuration Profile up correctly, it works fine, but I would like the Admin to be excluded.I tried the Exclusions section, and added the Type as 'Directory Service/Local User' and the name 'Admin' but this does not work.Any other suggestions please?Thanks, Will

Has anyone else been experiencing issues with dark mode in Jamf Pro 11? I've noticed for a while that sometimes when I go to Policies, they all load in white at first:Yesterday, I noticed while it was loading everything that I could see the plus to create a new policy. Since that's what I was there for, that's what I did. Then, this happened: Policies nested inside Policies. I tried duplicating this, and it seems like I only see this after I get a session timeout notification. If I extended it or let it expire and go back, I see this issue. 

Hi,I am using JAMF cloud and trying to workout ADE (First time) but i keep getting an error on my brand new Macbook Studio saying "Enrolling with Management Server Failed. "Amazon Root CA 1" certificate is not trusted.Any ideas ?I have opened a support case however it looks like its just taking time, so thought maybe I'd ask you guys for some ideas while waiting.

Hello Jamf Nation, I am trying to implement the nist macos security compliance project into our organization devices, https://github.com/usnistgov/macos_security .  I have read through the wiki and it keeps saying in each page that: We recommend working off of one of the OS branches, rather than the main branch I am wondering how can i generate the script and configuration profiles and put them in jamf while we have different mac os versions, i.e. ventura, monterey, sonama. I hope i am expressing my self clear. Please any guidance on that?  Thank you, 

I wanted to make a popup window that users had to click on to acknowledge they were getting an update that would close their open application.I created a notifyScript , a notifyPolicy, and a updatePolicy.notifyPolicy is set to enabled, recurring check-in, automatically rerun, on next.notifyPolicy is set to enabled. notifyPolicy passes the name of updatePolicy into notifyScript as an argumentnotifyScript uses updatePolicy name as a custom event trigger to call update PolicyWhen notifyPolicy runs, i get the following:"No policies were found for the "updatePolicy" trigger.Where am i going wrong?

Is there a script to set up the home page for Microsoft Edge ?

Looking for some help with a script issue please.I've written a script based on Charle Edge's https://github.com/jamf/MakeMeAnAdmin to use in a Cyber Essentials Mac build. Whilst the original script temporarily elevated the users privileges I want to create a temporary separate admin account.Everything works well apart from the final stage (lines 50-65, labelled "# Write a script for the launch daemon to run to delete the temporary admin account if it exists, delete the launch daemon then provide feedback to user.") to cleanup the admin account. This part of the script does work when run manually so I'm thinking it's an issue with permissions and/or ownership.Any advice would be appreciated. Thanks#!/bin/bash ############################################### # "I need admin". # John Moore, April 2024. # Based on "MakeMeAnAdmin.sh" by Charles Edge, see https://github.com/jamf/MakeMeAnAdmin. # This Jamf Self Service script will provide the user with access to a separate admin ac

Hello!I have successfully packaged, deployed, and tested the GMetrix plugins for Adobe CC 2021. This works for both Intel and Apple Silicon Macs.Using Composer:Download the GMetrixSMSe.app from their website Open composer and create/start capturing a new package deploymentPlace the App in /ApplicationsOpened the App and LoginOpen the settings pane and click on the Plugins PaneGo through every Adobe App installation procedureCreate the package source in ComposerOnce Composer is finished, here are the Directories needed:/Applications/GMetrixSMSe.app/Library/Application\\ Support/GMetrix/Library/Application\\ Support/Adobe/CEP/extensions/gmetrix.lita.adobe.aftereffects/Library/Application\\ Support/Adobe/CEP/extensions/gmetrix.lita.adobe.animate/Library/Application\\ Support/Adobe/CEP/extensions/gmetrix.lita.adobe.dreamweaver/Library/Application\\ Support/Adobe/CEP/extensions/gmetrix.lita.adobe.illustrator/Library/Application\\ Support/Adobe/CEP/extensions/gmetrix.lita.adobe.indesign

hey guys… having trouble scoping a self service policy to a specific Azure directory group. I deployed the policy to all comptuers and all users, but limited the scope to our our Operations team group in Azure. This obviously requires user to login to self service to see the policy, but logging into self service fails when using directory creds.  Directory user lookups are successful in the Cloud Identity Provider settings so I know Jamf can see the users, and we have self service set to allow users to login using directory creds.   Anyone got any thoughts as to what I”m doing wrong

I'm trying to put together a CIS lvl 1 plist for firefox deployed via JAMF pro and unsure which compliance options are related to which keys in the plist, or where to start beyond adjusting the standard plist, does anyone have any resources to aid with this? or a baseline plist to share?

Hi,for some time now the Management Commands on my Jamf Pro instance have not been working. They are staying on the "Pending" status. This also affects the installation of Mac Apps (the ones with the VPP licenses). As far as I can tell all of my devices are affected? Is there anything I can do about this?Kind regards