HelloIn the process of testing single sign on extension for managed Ipads, I have deployed the Authenticator app and the single sign on profile with following plist.SSO is working great on all apps except outlook, I think it has something to do with how Outlook use SSO/ auth method it uses. <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <!-- Existing Keys --> <key>AppPrefixAllowList</key> <string>com.microsoft.,com.apple.,com.jamf.,com.jamfsoftware.</string> <key>browser_sso_interaction_enabled</key> <integer>1</integer> <key>disable_explicit_app_prompt</key> <integer>0</integer> <!-- Managed App Config for Intune --> <key>IntuneMAMUPN</key> <string>$EMAIL</string> <!-- Required for Microsoft Enterpris

Hi everyone,I’m trying to figure out whether it’s possible to distinguish between devices with a physical SIM, devices without a SIM, and eSIM devices using Smart Groups. I’m not sure if anyone else is seeing the same behavior I am.My Environment:Jamf Pro On-Prem 11.22.1-t1762179835791 (Windows Server)Devices under management:iPhone (China version) iPad (China version)What I try to Achive:Create Smart Groups that can identify:Devices with a physical SIM inserted Devices without a SIM card Devices using eSIMWhat I’ve tested so far:Using Phone Number: Some devices can’t retrieve the SIM’s phone number. Using Current Carrier Network: All devices running iOS 26 and later fail to return this field. However, devices that could read the phone number on iOS 18 can still do so after upgrading to iOS 26. Using Current Mobile Country Code and Current Mobile Network Code: These values are available for devices with a SIM card on both iOS 18 and iOS 26. However, I also found that unactivated eSIM d

In our Jamf Protect tenant, we have a multitiude of devices that have been retired and no longer in use.  They still show in Jamf Protect unless we manually delete them and skew our results. Is the correct process to keep our Jamf Protect Computers inventory tidy to manually delete them from Jamf Protect?  Does Jamf Protect have any auto-expire policies?  For example, if disconnected for 6 months then purge device from Jamf Protect.

Does Jamf know when this will be resolved?  An important part of the logs are missing, and i haven’t heard any mention of a resolution.  Is there another way to find out who deletes machines or locks them?Also would like to point out that Details for all actions are blank.

Hello everyone, I come in search of a glimmer of hope.I am trying to use BeyondCorp Enterprise to enroll iPads on Jamf and be able to use G Suite with users under an advanced OU (Organizational Unit).Now, among the needs declared by Jamf, there is "Basic iOS mobile management enabled for your organization's Google integration."Has any of you ever managed this with the settings set to "advanced"? I fear it might not be feasible.

Hey, all! Does anyone recommend a nice/pretty way to use with iPad's ADE as in "user-will-be-in-awe-to-go-through-this-setup" ?I'm trying to setup some sort of onboarding for the iPads (1:1, not shared) in a similar way that we have for macOS, but I couldn't find anything (or, quite possibly, that I'm not searching in the correct ways in here ). I've tested the ADE with a prestage and it's working fine, plus the few Config Profiles that I'm doing testing with are landing correctly...just I need to make a more personalized "Corp-feel-like" experience...Btw, I'm using Jamf Pro - I need a way to have the user guided through the few hurdles with  Compliance (Register with Microsoft), Zscaler, etcThe enrollment customization part I have it sorted out, but it's not going to "enforce" the user to "click-here...run-this"...I think I need more of the 1st app to be triggered right after the ADE completion (maybe running temporarily as single-app mode?), where I can put some instructions on what

I have Jamf now and I added Jamf protect on my blueprint. It shows that Jamf protect was deployed but I expected to see the Jamf protect reports or alarming and so on in the Jamf now interface but there’s nothing of the sort. Can someone please explain what I’m missing? Thanks kindly in advance.

My daughter’s school causes to have the Jamf Trust app downloaded on her iPad 10th generation, and the school is currently only allowing it to update to iPadOS 26.01. However, even before the update, the iPad has started showing connectivity issues. After school hours, the school allows students to download and use personal apps, which would be blocked during school hours. However, when she uses apps such as TikTok, she often faces connectivity issues and signs saying “No Internet Connection”, even when the internet is completely fine. This still happens when the iPad uses her phone’s hotspot, or any other Wifi. Is it possible that the Jamf Trust app is messing with her internet connection?Recently, her Discord app has faced many issues. After her iPad battery died and the iPad restarted last Wednesday, her Discord has been having connectivity issues. Moreover, after she logged out of the app, she has since been unable to log back in. Whenever she tries to log in, it says “Oops! You’ve

Hi everyone,I'm currently trying to deploy Jamf Protect across my company, where about 90% of the users are developers.Since deploying Protect, we have noticed a massive slowdown during npm install — installation time is multiplied by 4 to 5, depending on the machine and project.To try to fix this, I added the following exceptions: Download Event exclusion Override Endpoint Threat Prevention – Process exclusions However, instead of improving performance, these exclusions seem to make the scan even slower.Has anyone experienced similar slowdowns with Protect during package-heavy operations (npm, yarn, brew, Xcode builds, etc.)?Do you have recommendations for: the correct type of exceptions to configure, paths or processes that should be excluded, or general best-practices for developer-heavy environments? Any help would be greatly appreciated — this is currently blocking our deployment.Thanks!

Has anyone had success deploying Cisco Secure Client XDR with Jamf School? We have a fleet of Macs that we’ve been trying to deploy this out to, but everything either fails, or does not install silently.Is there a guide or anything specific for Jamf School?

I am trying to use Jamf Trust in conjunction with my Ubiquity hardware and cannot connect to it.  I am trying to use the application ‘Wifiman’ to [teleport] into my office (https://help.ui.com/hc/en-us/articles/5246403561495-UniFi-Gateway-Teleport-VPN) ideally this would be the network route for all non ZTNA connections. I am still trying to figure out how to get all of the DNS to play nice in this ticket. Any insight or similar deployment notes would be great help. I don’t think I am the only person trying to implement this particular solution stack.

Unfortunately, we’re unable to start Jamf Remote Assist. We’ve already tried reinstalling the application and have granted the required permissions in iOS. However, we keep receiving an error message saying that the connection cannot be established.

How can we property set up Jamf Remote Assist to connect to our computers and Mac Minis. We confirmed it is enabled in Jamf and the settings are correct as far as we can tell, but we are not able to connect using the remote session command. Anything we need to configure on the computer settings?

Jamf Pro 11.5 has disabled classic API authentication by default, but soon it may be removed altogether. If you are interested in integration with Power BI, please visit this link and vote for integration. https://ideas.fabric.microsoft.com/ideas/idea/?ideaid=1d1acbef-5e21-ef11-8ee8-000d3a7c8d70

Hi All,  If you need to add Licenses for a Jamf App from the Catalog, How do you action this process? Thanks in Advance 

On Saturday, February 7, 2026, Jamf Cloud Infrastructure will be patched. During this time, you will be logged out of your Jamf Pro instance. The purpose of patching is to ensure that Jamf Cloud infrastructure and the database service are up-to-date, stable, and safe from security threats. Please see the times for our regions below. Hosted Data Region Date Start Time End Time us-gov-west-1 February 7, 2026 0800 AM CT 1200 PM CT

After update to jamf pro 11.23.2 (jamf cloud), first inventory updated like deleted the app and added with same version.did any one saw same behaviour in your account? 

Hi All,Is there a way to disable Apple Music on macOS.Tried a restriction profile using the com.apple.applicationaccess - false for allowMusicService.Also tried using Restricted Software, this takes too long and can take up to 1min to kick in. And it doesn't close the application or terminate the process.Would it even be possible to delete the application as its in the /System?Any ideas?TIASimon

Building a Jamf Cloud instance. Jamf 11.1.3Test machines is Sonoma 14.2. The machine seems to set up fine but doesn't get a machine certificate from my ADCS connector. The WiFi payload which would normally deliver it - gives 'unable to decrypt profile'(disregard the AD bind error. FWIW that's temporary because I'll be using Connect)The machine seems to set up fine but doesn't get a machine certificate from my ADCS connector. The WiFi payload which would normally deliver it - gives 'unable to decrypt profile'.

So any update about branding options of the SelfService+ App? So If I want to change the text under the "Welcome to Self Service+" is this possible?thanks. 

I (like others) use a smart group for students which lists devices that have “Apps Not In the App Catalog Are Installed”, in case some talented student is somehow able to download or sideload apps we don’t allow. I then use a configuration profile to hide all apps except those they downloaded/sideloaded, making their device near useless until they remove the offending app.Unfortunately with the iPadOS 26 update, Jamf Pro reports all the iPad default apps (camera, contacts, calendar, etc.) in the installed apps report. As these are default and can not be purchased through the app store, there is no way to add them to the app cataloge. So now every device that updates to iPadOS 26 will be considered to have unnauthorized apps on them. Not sure if this is a bug that Jamf will be able to fix, or if there is another work around to this.

I have a problem in the selfservice-app. I cant delete the notifications of failed installations. Note as read doesnt do anything, too. https://ibb.co/ChknWR1

Hello,We manage iPads in Jamf Pro and i have a question if its even possible to transform a native app like Files or Preview into managed app.By default native apps like Files or Preview are considered as unamanaged application even though a device is managed by Jamf Pro.Since we have a restriction “Documents from managed sources open in unmanaged destinations” se to “Restricted” due to possible data leaks there is no option to work with managed files in app like Files or Preview, that’s a real shame.Due to this behaviour we have to just rely on 3rd party apps like OneDrive or Adobe Acrobat Reader which we can make managed because the are installed via VPP.Is there any option to use native apps for managed documes even with the restriction turned-on? So make a native app mamaged? 

Currently, when you set up an SSO for Okta, it's not enough to give access to new users. You have to create users manually or integrate Okta with Jamf Pro using LDAP which is a little bit painful.As a user who only needs LDAP for provisioning/deprovisioning of users (and from all list of apps I use in company only Jamf Pro lacks SCIM support) I believe it would be beneficial to support SCIM as an alternative for LDAP in some cases.

Is there anyway to create pppc for BluetoothAlways config? PPPC Util does not have this option. I would like chrome to be enabled without using admin privilege.