Back from JNUC? Learned a lot of new things, haven’t you? Missed even more I guess…Don’t worry, let me remind you what news we announced in Compliance benchmarks! Review the Keynote, Commercial State of the Union, and dedicated Compliance sessions (once available) for more details.NIST 800-53 rev 5 BaselinesYes, those from mSCP - low, moderate, and high - are now available in the built-in capability in Jamf Pro. You can build a benchmark out of them TODAY - as always, we recommend to start with monitor only, and roll-out gradually from small test group all the way to the target population.Compliance ScoreUsing Compliance in Protect? Like the simple compliance percentage as an overall indicator? It is NOW in Jamf Pro as well! Each benchmark shows a compliance score that tells you the compliance status over the assigned computers to know how you are doing. Any questions? Curious about where we are heading next? Let me know! 

Today we are releasing a maintenance version of Jamf Pro; highlights include: Platform SSO Reporting Functionality for the Jamf Management FrameworkJamf Conditional Access.app, which is part of the Jamf management framework installed on enrolled computers and used for device compliance with Microsoft Entra, can now report on Microsoft Entra ID Platform SSO registration status and provide additional information about the registration state, including device ID and user UPN. Resolved IssuesJamf Pro Server: Security IssuesJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI141347] Fixed: A known vulnerability in a third-party library (CVE-2025-41249). [PI141349] Fixed: A known vulnerability in a third-party library (CVE-2025-41248). [PI141856] Fixed: A cross-site scripting (XSS) issue. [PI141857] Fixed: A cross-site scripting (XSS) issue.Jamf Pro Server[PI120484] Fixed: Jamf Pro's PreStage enrollment displays iOS 17.5 as an available minimum OS ver

Today we are releasing Jamf Pro 11.21; highlights include:Impact Alert Notifications for Deployable ObjectsImpact alert notifications include enhanced visibility and control when modifying deployable object configurations. These notifications help prevent unintended large-scale deployments by giving administrators insight into how their modifications will affect devices and existing configurations across their organization. When editing the scope of any deployable object (e.g., policies, configuration profiles, apps), a confirmation dialog displays an alert message that indicates that significant changes may cause increased network traffic and temporary application instability. For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro. Cloud Upgrade ScheduleYour Jamf Pro server, includi

Today we released Jamf Connect 3.4.0; this release addresses the following product issues:[PI138079] Fixed: The offline multifactor authentication prompt closes after an incorrect entry, requiring users to enter their username and password before attempting to authenticate again. [PI139042] Fixed: Users without a local account are prompted to re-enter their Microsoft Entra ID password after entering their username and temporary password during local account creation. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Hello Jamf Nation!To those of you headed to JNUC this week, we’re very excited to see all of you for another year of our amazing community coming together. We’ve released Jamf Pro 11.22.0 beta which features MDM Server Migration with App Preservation for iOS and iPadOS Devices, a number of fixes and improvements, and more!How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher.Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

With Jamf Pro 11.21, administrators can see impact alert notifications when saving deployable objects, skip a new Setup Assistant pane in macOS Tahoe, and deploy even more configuration profile payloads with blueprints!Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.Thank you for your continued support and feedback!

Important notice: This version is intended only for on-premise environments. Jamf Pro 11.20.2 will not be mass deployed to Standard Cloud environments or posted on Jamf Account for manual hosted upgrades. Today we are releasing a maintenance version of Jamf Pro; highlights include: Resolved Issue Jamf Pro Server: Security IssueJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI141565] Jamf Pro 11.20.2 includes Tomcat 10.1.44, resolving a known security vulnerability in a third-party library (CVE-2025-48989). For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro.  

Important notice: Beginning with this version, Jamf is no longer sending maintenance release email messages. We will continue to send Jamf Pro release announcement email messages for major and minor releases (e.g., 12.0.0, 11.21.0, respectively). Today we are releasing a maintenance version of Jamf Pro; highlights include:Resolved IssuesJamf Pro Server[PI134363] Fixed: When configuring a computer configuration profile with a Network payload with "Any ethernet" selected, Jamf Pro incorrectly uses the string "AnyEthernet" instead of the required "GlobalEthernet" in the payload, preventing computers from successfully joining corporate 802.1x wired networks. [PI139045] Fixed: Activation Lock status fails to display for eligible iOS devices in the Management > Activation Lock bypass category of a mobile device inventory record. [PI140234] Fixed: Static groups fail to display in the Management > Mobile Device Groups category of a mobile device inventory record. [PI140306] Fixed: Jamf P

With the new operating system going live today, and the great work of mSCP community, you can rely on uninterrupted compliance of your fleet from the very beginning. All you need to do is navigate into your existing benchmark and open the Benchmark rules where you review the changes coming with macOS 26. Then save the draft, deploy the benchmark - and it's done! New smart groups covering Tahoe will be created and objects will be scoped to them. This covers also Macbooks that get updated at any time after the release. Check the Rules report tab to see the compliance status!For any newly created benchmark, the support is just there.Let us know how the new OS version works for you! 

With Jamf Pro 11.20, support the next major Apple operating systems on the day they’re released, configure simplified setup for Platform Single Sign-on (Platform SSO), and enforce new restrictions!Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.Thank you for your continued support and feedback!

Today we released Jamf Connect 3.3.0. This release includes the following: Changes and Improvements The release_notes.txt file is no longer available in the Jamf Connect DMG file or Jamf Connect Configuration. To view the Jamf Connect release notes, see Jamf Connect App for macOS Release History.Resolved Issue [PI139049] Fixed: The identity provider authentication prompt in the Jamf Connect login window requires users to scroll if the Login Window Size (LoginWindowSize) setting is configured. For configuration profiles using Okta-OIDC as their identity provider, Jamf recommends configuring the Login Window Size (LoginWindowSize) setting to Max for the best user experience. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

We continue in our efforts to streamline compliance benchmarks workflows and unify the reporting. Today, we are proud to announce two new highly demanded exports within the Compliance capability in Jamf Pro - something you have been asking for since the initial launch of Compliance in April.Auditing documentation: Holding the benchmark settings as configured by the admin, this set of documents is aimed to serve for compliance audits purposes. Those of you already using Jamf Compliance Editor or mSCP are familiar with these - now the adoc, pdf, html, and xlsx documents for each supported OS version are available right under Compliance Configuration tab in Jamf Pro. Compliance status: After enabling the computer-level compliance reporting in July, you can now export the overall compliance status, i.e. number of passing and failing computers for each rule in a benchmark, into csv file - very similar to the one produced by Compliance baselines in Jamf Protect. With this export, you can rep

Today we are releasing Jamf Pro 11.20; highlights include:Compatibility with Apple Operating SystemsCompatibility and new feature support are based on testing with the latest Apple beta releases of macOS Tahoe 26, iOS 26, iPadOS 26, tvOS 26, visionOS 26, and watchOS 26.   Simplified Setup for Platform Single Sign-OnJamf Pro can now support deployment of a Platform Single Sign-on (Platform SSO) application during the Setup Assistant with macOS 26* using the Simplified Setup for Platform Single Sign-on workflow in a computer PreStage enrollment. This workflow allows for Platform SSO to be enforced through the Setup Assistant during Automated Device enrollment, requiring registration with an identity provider (IdP) and the ability for macOS to create a user account based on the user’s information from the IdP.*Feature support is based on testing with the latest Apple beta releases. Full functionality requires compatible implementation from supported identity providers (Okta and Microsoft

Today we released Jamf Connect 3.0.0. This release includes the following changes and improvements: Upcoming Changes to Jamf ConnectJamf Connect 3.0.0 continues to include the following login window capabilities and direct support for Jamf Connect Configuration:-Desktop multifactor authentication-macOS account provisioning Deprecation of Jamf Connect Menu Bar App CapabilitiesThe Jamf Connect menu bar app is now deprecated and will no longer receive updates. All menu bar app capabilities from Jamf Connect 2.45 and earlier will be unaffected by this deprecation. Future updates to the Jamf Connect menu bar app will be limited to macOS compatibility and security updates.Note: For customers deploying Jamf Connect with Jamf School, Jamf recommends to continue using version 2.45.1 instead of updating to version 3.0.0. This will preserve the existing menu bar capabilities for Jamf Connect and not affect existing deployments.No immediate action or migration efforts are necessary; however, Jam

Today we are releasing a maintenance version of Jamf Pro; highlights include: Changes and ImprovementsJamf Pro 11.19.1 includes Tomcat 10.1.43.  Resolved Issues Jamf Pro Server: Security IssuesJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI136944] [PI138128] Fixed: A known vulnerability in a third-party library (CVE-2025-48976). [PI138965] [PI138090] Fixed: A known vulnerability in a third-party library (CVE-2025-5878). Jamf Pro Server[PI135178] Fixed: In a computer configuration profile with a Restrictions payload configured to allow integration with external intelligence services, users may be prevented from enabling ChatGPT on computers in scope. This is due to the profile containing the key "allowedExternalIntelligenceWorkspaceIDs", even if the corresponding setting is not selected. [PI139029] Fixed: Modifications to smart groups are unable to be saved when the group is a dependency of a blueprint and impact alert notifications are enab

Update 06 August 2025: Standard Cloud upgrades are scheduled for the weekend of 15-16 August (details below). We appreciate your patience with the revised schedule. Today we are releasing Jamf Pro 11.19; highlights include:Impact Alert Notifications for Scopeable ObjectsThese notifications provide enhanced visibility and control when modifying group configurations. This feature helps prevent unintended large-scale changes by giving administrators insight into how their modifications will affect devices and existing group configurations across their organization.   Automatic Redistribution of ACME CertificatesYou can configure Jamf Pro to automatically redistribute ACME certificates to computers and mobile devices at a specified number of days before the certificates expire. To support this function, a $PROFILE_IDENTIFIER is automatically inserted into the Subject of the issued certificate as an organizational unit (OU). Note: Your ACME certificate authority template must also support t

With Jamf Pro 11.19, prevent potential scope errors with impact alert notifications, add descriptions to smart groups, and deploy Self Service+ automatically!Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.Thank you for your continued support and feedback!Jamf Learning Hub - Release Notes Videos: https://learn.jamf.com/bundle/jamf-pro-release-notes-videos

Today we released Jamf Connect 3.2.0; this release includes the following changes and improvements:Identity Provider Support for RapidIdentityJamf's RapidIdentity is now available as an officially supported cloud identity provider (IdP) for the Jamf Connect login window and Jamf Connect Configuration. For more information about configuring RapidIdentity as your cloud IdP, see Integrating RapidIdentity's Identity Automation with Jamf Connect. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Hey Jamf Nation!Jamf Pro 11.20.0 features new keys and updates for Apple’s new Operating Systems coming this fall. There are also great updates to SSO features and functionality, updates to new APIs, and more!How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher.Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

We’ve been getting a lot of feedback that you need to see the compliance status of specific computers to take corrective actions - so here it finally is!Available now in all Jamf Pro 11.18 and newer instances, you are now able to click on each rule of your benchmark to get a list of computers in scope, with their compliance status against this rule, and a link to computer inventory for further investigations.Let us know what you think of this and how it helps you in your workflows. Availability of the data via APIs and exports is the next on our list, so stay tuned! 

Self Service+ is releasing 2.5.0. In this release you will find:Changes and ImprovementsNotification titles display in both the Notifications and Updates pages.Resolved Issues for Self Service+[PI136074] Fixed: URL scheme-triggered installations in Self Service+ may display a loading spinner and fail, while Jamf Pro incorrectly reports them as successful.Resolved Issues for Account Management[PI125130] Fixed: Configurations using the Microsoft Single Sign-on Extension fail to display the following error when users request admin privileges without being in an allowed group: "Unable to complete elevation. Contact your administrator for additional information."

Today we released Jamf Connect 3.1.0; this release addresses the following product issues:[PI131938] Fixed: For configurations using Microsoft Entra ID as their identity provider, the Jamf Connect login window displays an error message at the bottom of the screen when passkeys are an available authentication method. [PI134695] Fixed: The Jamf Connect login window displays a black screen after a user enters their password incorrectly and triggers the maxFailedAttempts setting. [PI135947] Fixed: When Short Name (OIDCShortName) is set to an email, the Jamf Connect login window creates a user account with the entire email domain instead of the prefix before the "@" symbol. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Today we are releasing a maintenance version of Jamf Pro; highlights include:Changes and ImprovementsJamf has upgraded the Jamf Support ticketing system. To access the new Support portal, log in to Jamf Account and click Contact Support in the top navigation. Jamf Pro no longer returns a "Version entered is unknown" error when attempting to execute an advanced computer search or save a smart computer group that uses 'unknown version' as a value for existing patch reporting criteria. Resolved IssuesJamf Pro Server: Security IssueJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI136944] Jamf Pro 11.18.1 includes Tomcat 10.1.42, effectively resolving a known security vulnerability in a third-party library (CVE-2025-48976). For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the

Hey Jamf Nation!Jamf Pro 11.19.0 features Scoping Guardrails and Group Description Fields for Smart and Static Groups, along with Automatic Seat creation in DigiCert One TLM with SCEP Payloads, ACME Payload for macOS/iOS redistribution support, and more!How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher.Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

Today we are releasing Jamf Pro 11.18; highlights include:Return to Service for Mobile Devices The Return to Service feature is available in the Jamf Pro interface, in addition to the Jamf Pro API. Return to Service is an option within the Wipe Device remote command that instructs a wiped device to automatically reconnect to the Wi-Fi network and re-enroll with Jamf Pro. Return to Service remembers the Wi-Fi settings and applies them automatically, which returns the device to a ready-to-use state for the next user while ensuring privacy and security among multiple users of the device.   Automatic Deployment of Self Service+ for macOS Note: The option to automatically deploy Self Service+ from Jamf Pro will be made available on a regional basis in environments with Jamf Pro 11.17.1 or later. When it becomes available in your region, you will see the option in Jamf Pro. Jamf Pro enables administrators to automatically deploy Self Service+ to enrolled computers by setting Self Service+ as