Up until last week we had our device prestages set up to prompt to update to the latest iOS based on device eligibility.  Sometime last week this no longer works.  Not sure if trying to update via the new software update tool has the same issue.   Dealing with the chatbot to try and submit a ticket is an extreme effort in frustration!!!!!!! 

Went to the support portal to enter a ticket and has a link at the top to go to the new support portal which turns out to just be an AI chat bot. While its good for Jamf to have an AI chatbot try and “screen” support questions, I am wondering how well this will work out. The AI bot did not really have an answer to my question so I asked it to create a ticket and it said the team would email me back.I hope there is a way to track these support requests like you could with the old ticketing system. It can be important to have a ticket number. 

Hi there. We’re looking at moving to PSSO, where we currently have Jamf Device Compliance on prod Macs, but have run into a wall.MDM=Jamf, IdP=Entra ID, PSSO profile uses Secure Enclave Key as the auth method because we have Jamf Connect managing accounts and password sync and understand that they can be complementary.On new builds when we deploy the PSSO profile before registering with Intune/Company Portal/Entra ID via our normal Jamf-driven Device Compliance workflow, it registers cleanly, works as expected, and CA permits access to protected data and apps, so it’s successfully replacing Device Compliance.On prod devices already registered with Device Compliance, with Entra ID device records, WPJ keys in keychain and the rest, when we deploy PSSO after, it initiates the registration, accepts the user credentials, creates a duplicate stub record in Entra ID, but at the last step where it would require MFA and then pop up the dialog prompting to allow CP Passkeys in System Settings, i

I’m slowly rolling out Jamf Connect 3.1 and probably Jamf Connect 3.2 with Self Service+ app (since the change was made).Has anyone used Passkeys or hardware keys (think Yubikey) with the new flow? Any issues? 3.1.0 (2025-07-07)Resolved Issues [PI131938] Fixed: For configurations using Microsoft Entra ID as their identity provider, the Jamf Connect login window displays an error message at the bottom of the screen when passkeys are an available authentication method. We do use Entra ID as our Idp. I know older versions of Jamf Connect pre 3.xx did not work.i’ll be doing some testing on my end soon. I was just curious if anybody had tried it yet.Thanks.

Hello, I have a user iPad who is not communication with jamf pro. All commands get stuck in pending or failed. I looked at the Device Management and saw that the SCEP Device Identity certificate is expired. How do I renew? Thanks

Hello,I am a ServiceNow developer and working with our internal JAMF team member. We have integrated the two with the out-of-the-box connector. The data is coming into ServiceNow, but we have noticed an issue on the JAMF side.In the User and Location area, it is not populating even though the SME says it is mapped and setup properly. It is linked to Active Directory but seems to not be populating this area though it seems to have everything that is needed. Any idea what might not be setup or mapped that could explain this area not getting populated? It is impacting our Hardware and Software asset processes. Any thoughts or suggestions would be appreciated.Thanks.

In this scenario, which would you use? • You're starting a new company in 2025 • Fresh Jamf Pro build • Fresh Apple Business Manager   Do you use DEP Notify, Jamf Setup Manager, or something else? https://www.jamf.com/blog/apple-device-enrollment-jamf-setup-manager/

Hi there,How are you guys handling time zone/region changes for end users with standard user level privileges, I’ve tried with Self Service scripts but I’ve not found any that work consistently.Are there any Sequoia solutions to this issue?

Greetings everyone!I am working with the Jamf Pro API and cannot for the life of me figure out how to obtain a list of every title which is available in the Jamf App Catalog, even if I am not currently deploying it.I have experimented with several existing endpoints including /api/v2/patch-software-title-configurations, but only ever seem to get titles which are currently being deployed or patched.What I am trying to get is the FULL list of apps which would be present in Computers → MacApps → Jamf App Catalog → New → Jamf App Catalog, which (as of this posting) lists 265 titles.In Context, I am creating a Python script to acquire, analyse, normalize and update data which resides across a number of data sets (Excel, SQL etc). When we are deploying a new app, I effectively want to know if that title is available in the Jamf App Catalog.If someone could point me to the correct Classic or Jamf Pro API endpoint, it would be much appreciated! Thank you all in advance!

Is anyone else experiencing issues with the "Lock Desktop Picture" configuration with MacOS 15? I recently updated our fleet from 14 to 15.5 and it seems to have broken our branded desktop picture. Not only has it reset the wallpaper to the default, but it has also broken the functionality setting. I am also open to just making a policy that sets and locks the desktop if that is a better process.   

Hi, I want to get backup of my data from the Gmail accoubts. I want any safe and fast tool which can proviode me accurate results.If anyone has the solution for my problem, please share.

Hi, I am managing a fleet of iMacs and MacBooks. I have disabled the “Accessibilty System Preference” panel in JAMF school profile but how can I disable it totally in order users cannot activate it using keyboard?Thank you  

We recently ran workspace update 2025.05.10 and had a handul of devices that it installed but wouldn’t open. After a day all but one started working. We have one where it won’t open on the latest version, if you remove and put the old version it works. We tried running it different ways using the open -a command, but each time it said it couldn’t be found. If you boot in to safe mode, it opens. The tech ran the uninstaller and checked all the locations to make sure there wasn’t any residual files leftover. They checked to see if there were any login items that would be causing issues. 

HiI’ve made a config profile on jamf pro to lock the screen after 5 minutes of inactivity, just a simple policy, nothing specialBut I had left the Log out users after 30 minutes ticked. I’ve now disabled that, and completely remade the config profile itselfBut the 30 minute log out is still enabled on the macs What am I doing wrong here? Is that even the right place I should be looking?Thanks

• iOS 18.6.1• watchOS 11.6.1 https://support.apple.com/en-us/100100

Today we released Jamf Connect 3.0.0. This release includes the following changes and improvements: Upcoming Changes to Jamf ConnectJamf Connect 3.0.0 continues to include the following login window capabilities and direct support for Jamf Connect Configuration:-Desktop multifactor authentication-macOS account provisioning Deprecation of Jamf Connect Menu Bar App CapabilitiesThe Jamf Connect menu bar app is now deprecated and will no longer receive updates. All menu bar app capabilities from Jamf Connect 2.45 and earlier will be unaffected by this deprecation. Future updates to the Jamf Connect menu bar app will be limited to macOS compatibility and security updates.Note: For customers deploying Jamf Connect with Jamf School, Jamf recommends to continue using version 2.45.1 instead of updating to version 3.0.0. This will preserve the existing menu bar capabilities for Jamf Connect and not affect existing deployments.No immediate action or migration efforts are necessary; however, Jam

Is there an issue in Jamf Cloud online currently.I added a new app from Apple School Manager this morning and it still has not arrived in Jamf Cloud for availability.  I have double checked my VPP token, even downloaded and assigned a fresh one just to make sure it was not expired.  I tested the same app by assigning a few licenses to Intune and they showed up within a few seconds in Intune.  Not sure what else to check, I also forced a sync from Apple education support in Jamf Cloud.Earlier this morning I was unable to get apps deploying to new iPads that were already assigned in Jamf Cloud, it gave the error: “Pending - All licenses are in use or the license is not assigned yet” and took over an hour before they finally installed.

HelloWe have just completed MAC enrollment to JAMF with pre existing mobile users being converted to STD users after enrollment. We use entra for jamf connect. We have a SAN that users access to R/W data. If another user logs into the mac (creates std account) he cannot access the san b/c his GID/UID is not what the san expects. He can read but not write. Our workaround is to wipe the mac, delete from jamf, create the mobile account then enroll into jamf and that user is good. Anyone have a similar issue? Ideas to fix?

HelloI'm early in my JAMF API & Swift learning curve. I have worked through the wonderful Swift/JAMF API tutorial at:Part 2: https://www.jamf.com/blog/mac-admin-swift-jamf-pro-api-decoding-data-objects/and I am now attempting to expand the reported data pulled from the JSON. I have no problem pulling additional data returned from decoder.decode that is at the root level of general (for instance) such as id, name, ip_address etc. but I haven't been able to figure out how decoder.decode captures the remote_management data that goes a level deeper.Any suggestions would be greatly appreciated!Thanks!William JacobsonAutoclub, Costa MesaExample on how the data is decoded and referenced:guard let result = try? decoder.decode(ComputerResults.self, from: data)    else {      exit(1)    }        for computer in result.results {      print(computer.id,            computer.general.name,            computer.operatingSystem.version,            computer.hardware.model)    }  }Relevant part of the

Does anybody use a similar workflow for renewing SCEP certificates and or is this supported? Specifically adding $PROFILE_IDENTIFIER to an additional x509 attribute. Appreciate your insight! 

Did the mission of Jamf Nation change with the recent update? The recent activity feed is full of volunteer stuff, did I miss a memo somewhere?

As I'm writing articles, I'll update this page with the latest articles: Updated 23SEPT2024 What is Platform Single Sign-On - An overview of the technology and how it works https://community.jamf.com/t5/jamf-pro/what-is-platform-single-sign-on/td-p/320251 Configure PSSOe for Microsoft Entra ID Jamf Technical Guide: https://learn.jamf.com/en-US/bundle/technical-articles/page/Platform_SSO_for_Microsoft_Entra_ID.html Sean's first draft guide: https://community.jamf.com/t5/jamf-pro/configure-platform-single-sign-on-pssoe-for-microsoft-entra-id/td-p/320252 Configure Kerberos SSO with Microsoft Entra PSSO - https://community.jamf.com/t5/jamf-pro/configure-kerberos-sso-for-microsoft-entra-platform-single-sign/m-p/323781#M278609 Some sample .mobileconfig files for you to modify - https://github.com/sean-rabbitt/jnuc-2024 Configure PSSOe for Okta Identity Engine https://community.jamf.com/t5/jamf-pro/configure-platform-single-sign-on-for-okta-identity-engine-with/m-p/3204

#!/bin/bash#Determine PSSO status of current console user logged in at time of recon#Get current user logged in to devicecurrentUser=$( /usr/sbin/scutil <<< "show State:/Users/ConsoleUser" | /usr/bin/awk -F': ' '/[[:space:]]+Name[[:space:]]:/ { if ( $2 != "loginwindow" ) { print $2 }}' )#Read local user directory record to see if AltSecurityIdentities attribute has been added by macOSpssoe_status=$(dscl . read /Users/$currentUser dsAttrTypeStandard:AltSecurityIdentities | awk -F'SSO:' '/PlatformSSO/ {print $2}')if [[ -z $pssoe_status ]]; then echo "<result>No PSSOe registration found</result>"else echo "<result>Yes Entra ID account $pssoe_status registered to $currentUser</result>"fi

Many of our sports teams use Hudl to view past games.  We would like them to be able to watch the videos, but not during instructional time.  I know that you can block certain sites, but there are no time limits available.  I am not a script writer, so is there a way for us to do this? Thank you!

Is there any chance we could get a notification when the Compliance baselines get an update? I find myself checking everyday and it would be nice if that could be added to the notifications areahttps://ideas.jamf.com/ideas/JPRO-I-1572