Skip to main content
Question

JamfID → JamfPro (SSO)

  • November 8, 2025
  • 3 replies
  • 44 views

zkkt1446
Forum|alt.badge.img+1

When using Jamf ID for SSO into Jamf Pro, is it mandatory to create a corresponding user account for the Jamf ID on the Jamf Pro side?


I would like to keep only a break-glass account on the Jamf Pro side.
Even if I match the Jamf ID role and the group name on the Jamf Pro side, RBAC does not work.


If there is a way to achieve RBAC-based SSO into Jamf Pro using Jamf ID, please let me know.

3 replies

shrisivakumaran
Forum|alt.badge.img+8
  • Jamf Heroes
  • 85 replies
  • November 8, 2025

Jamf ID is not mandatory, You have option to choose “users can log in using either Jamf ID or their IdP credentials.”

End user can use Idp credentials to enrol/self service login.


zkkt1446
Forum|alt.badge.img+1
  • Author
  • New Contributor
  • 1 reply
  • November 10, 2025

Jamf ID is not mandatory, You have option to choose “users can log in using either Jamf ID or their IdP credentials.”

End user can use Idp credentials to enrol/self service login.

 

Dear Shri Sivakumaran,

Thank you for your message.

 

I know that using an IdP allows RBAC in Jamf Pro without creating accounts on the Jamf Pro side.
However, when using Jamf ID (without an IdP) for SSO login to Jamf Pro, I’d like to know whether it’s necessary to create a corresponding user account for the Jamf ID on the Jamf Pro side.


Shane Bucher
Forum|alt.badge.img
  • New Contributor
  • 5 replies
  • November 11, 2025

You can use the failover URL to log in without a Jamf ID, or an IDP login.