We’ve been getting a lot of feedback that you need to see the compliance status of specific computers to take corrective actions - so here it finally is!Available now in all Jamf Pro 11.18 and newer instances, you are now able to click on each rule of your benchmark to get a list of computers in scope, with their compliance status against this rule, and a link to computer inventory for further investigations.Let us know what you think of this and how it helps you in your workflows. Availability of the data via APIs and exports is the next on our list, so stay tuned! 

Self Service+ is releasing 2.5.0. In this release you will find:Changes and ImprovementsNotification titles display in both the Notifications and Updates pages.Resolved Issues for Self Service+[PI136074] Fixed: URL scheme-triggered installations in Self Service+ may display a loading spinner and fail, while Jamf Pro incorrectly reports them as successful.Resolved Issues for Account Management[PI125130] Fixed: Configurations using the Microsoft Single Sign-on Extension fail to display the following error when users request admin privileges without being in an allowed group: "Unable to complete elevation. Contact your administrator for additional information."

Today we released Jamf Connect 3.1.0; this release addresses the following product issues:[PI131938] Fixed: For configurations using Microsoft Entra ID as their identity provider, the Jamf Connect login window displays an error message at the bottom of the screen when passkeys are an available authentication method. [PI134695] Fixed: The Jamf Connect login window displays a black screen after a user enters their password incorrectly and triggers the maxFailedAttempts setting. [PI135947] Fixed: When Short Name (OIDCShortName) is set to an email, the Jamf Connect login window creates a user account with the entire email domain instead of the prefix before the "@" symbol. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The l

Today we are releasing a maintenance version of Jamf Pro; highlights include:Changes and ImprovementsJamf has upgraded the Jamf Support ticketing system. To access the new Support portal, log in to Jamf Account and click Contact Support in the top navigation. Jamf Pro no longer returns a "Version entered is unknown" error when attempting to execute an advanced computer search or save a smart computer group that uses 'unknown version' as a value for existing patch reporting criteria. Resolved IssuesJamf Pro Server: Security IssueJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI136944] Jamf Pro 11.18.1 includes Tomcat 10.1.42, effectively resolving a known security vulnerability in a third-party library (CVE-2

Hey Jamf Nation!Jamf Pro 11.19.0 features Scoping Guardrails and Group Description Fields for Smart and Static Groups, along with Automatic Seat creation in DigiCert One TLM with SCEP Payloads, ACME Payload for macOS/iOS redistribution support, and more!How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher.Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information rega

Today we are releasing Jamf Pro 11.18; highlights include:Return to Service for Mobile Devices The Return to Service feature is available in the Jamf Pro interface, in addition to the Jamf Pro API. Return to Service is an option within the Wipe Device remote command that instructs a wiped device to automatically reconnect to the Wi-Fi network and re-enroll with Jamf Pro. Return to Service remembers the Wi-Fi settings and applies them automatically, which returns the device to a ready-to-use state for the next user while ensuring privacy and security among multiple users of the device.   Automatic Deployment of Self Service+ for macOS Note: The option to automatically deploy Self Service+ from Jamf Pro will be made available on a regional basis in environments with Jamf Pro 11.17.1 or later. When it becomes available in your region, you will see the option in Jamf Pro. Jamf Pro enables administrators

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues:  Jamf Pro Server: Security Issues Jamf provides the CVE-ID for security issues with high or critical severity when possible.[PI124081] Fixed: A known vulnerability in a third-party library. (CVE-2024-47554)  Jamf Pro Server [PI135204] Fixed: After device re-enrollment, some configuration profiles may fail to install automatically even when properly scoped to the device. [PI135884] Fixed: Smart user groups that use excluding criteria (e.g., "is not", "not like", "does not match regex") to match roster data fail to match users with no associated Apple School Manager roster data due to a smart group calculation error.

Today we are releasing Jamf Pro 11.17; highlights include: App Switcher for Jamf Platform ProductsAn app switcher has been added to streamline navigation between Jamf platform products and between multiple instances of a product. To use it, click the app switcher button in the top-left corner of the Jamf Pro interface. In the pop-up dialog, click a product to reveal its instances and shortcuts to top-level pages.Important: This capability requires logging in to Jamf Pro using OIDC-based single sign-on (SSO) configured in Jamf Account. If you do not have an OIDC identity provider (IdP), Jamf ID is available as an SSO option. For more information, see SSO with OIDC Through Jamf Account in the Jamf Pro Documentation. Suppor

Update 08 May 2025: Standard Cloud upgrades are scheduled for the weekend of 16-17 May (details below). We appreciate your patience with the delayed schedule. Today we are releasing Jamf Pro 11.16; highlights include: Compliance BenchmarksBuilt on the macOS Security Compliance Project (mSCP) framework, compliance benchmarks enables you to automatically implement security standards across Mac devices. Compliance benchmarks supports industry-standard frameworks and automatically generates necessary management settings to enforce security controls. When enabled, compliance benchmarks create and maintain device security baselines through a combination of policies, configuration profiles, scripts, extension attributes, and smart groups, eliminating the need to manually configure individual security controls.Important: This capability requires log

Today we are releasing a new version of Jamf Pro; highlights include: New Restrictions and Skip Keys for Computers and Mobile Devices New settings include restrictions for Apple Intelligence reports, smart replies in Mail, summarization in Safari and Notes, and calling and messaging app modification. New Skip Keys in PreStage Enrollments include Software Update and Safety and Handling.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Note: There will be no mass upgrades of Standard Cloud environments for this release. To access new versions of Jamf Pro, log into 

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues: Jamf Pro Server [PI126319] Jamf Pro now pushes a new single sign-on extension (SSOe) profile to devices that have been either re-enrolled without being marked as unmanaged in Jamf Pro or scoped for device compliance for shared devices and had the SSOe profile removed. [PI131971] Performance is improved in environments where a large number of computers belonging to a site update their inventory simultaneously. [PI134534] A 404 error no longer occurs when navigating between a smart group that is scoped to a blueprint and the blueprints interface.   For additional information on what's included in this release, review the

Today we are releasing Jamf Pro 11.14; highlights include: AD CS Certificate Deployment Using SCEPYou can now use the SCEP payload to deploy certificates from an Active Directory Certificate Services (AD CS) integration. Previously, only the Certificate (API) payload was available to issue AD CS certificates. The SCEP deployment method supports automatic certificate revocation based on scope change. You can also redistribute certificates that are approaching their expiration date by redistributing the configuration profile. App Installers Support for External URL DownloadsJamf App Installers supports software title installation packages that are downloaded via versioned URLs from a vendor's website. An alert is displayed on the Configuration settings tab for any software title that is downloaded via an external URL.Note: At this time, only

Today we are releasing a maintenance version of Jamf Connect. Jamf Connect 2.45.1 addresses the following product issue: [PI134272] Jamf Connect login window configurations with Okta Classic Engine as the identity provider no longer display the authentication web view as a blank window, preventing new user accounts from logging into their computers.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Today we are releasing Jamf Pro 11.15; highlights include: Declaration Configurations with BlueprintsBlueprints simplify the creation of complex workflows by leveraging declarative device management to ensure devices meet a particular management state. You can use blueprints to scope management settings to devices using customizable components that include payloads and their configurable settings, all in one location. Using declarative device management enables devices to proactively and autonomously apply the scoped management settings and report state changes to the MDM server asynchronously, streamlining the device management workflow.SSO Prerequisite: Blueprints requires that OIDC-based single sign-on (SSO) authentication be set up and managed in Jamf Account. For more information, see

Today we released Jamf Connect 2.45.0; this release includes minor bug fixes and improvements.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues: Jamf Pro Server: Security Issues Jamf provides the CVE-ID for security issues with high or critical severity when possible. [PI126232] Updated a third-party library to resolve a known vulnerability. (CVE-2025-24970) Jamf Pro Server [PI125880] Jamf Pro users who migrated from an on-premise environment to a Jamf Standard Cloud-hosted or Premium Cloud-hosted environment using a custom URL and port 8443 will no longer experience authentication errors while using SSO through Jamf Account. [PI126314] Jamf Pro successfully populates data in the mdm_client database table, resolving an issue that prevented computers from receiving user-level commands and configuration profil

Since the initial release of this integration, Jamf and Microsoft have both made improvements to related features and capabilities, which includes additional data complexity and updates to Sentinel to better support it. The updated integration includes support for the latest telemetry data types and includes: A new Jamf Protect integration, available on the Microsoft Azure marketplace. A new section for configuring data forwarding to Microsoft Sentinel, available in the macOS Security portal. For more information, see Setting Up Data Forwarding to Microsoft Sentinel. If you already have Sentinel configured,

With Jamf Pro 11.14, utilize new additions to the Jamf Pro API in scripts for automation and use the SCEP payload of a computer configuration profile to deploy certificates with the Active Directory Certificate Services (AD CS) Connector!

An up-to-date changelog of the Jamf Protect endpoint threat prevention feature is now available on the Jamf Learning Hub. The endpoint threat prevention database for macOS is managed by the Jamf Threat Labs team. Note: This changelog is separate from the Jamf Protect product release notes.

Today we released Jamf Connect 2.44.0; this release addresses the following product issue: [PI123459] Jamf Connect now passes the correct shortname to Kerberos when using the PasswordChangeFlow workflow.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.    

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues: [PI124276] In Jamf Pro instances hosted in Microsoft Azure, a port number is no longer incorrectly appended to the end of the IP Address field in a device's inventory record, which previously prevented any changes to the General pane from being saved. [PI125557] The device compliance for shared devices workflow to configure iOS apps no longer causes issues for apps other than Jamf and Microsoft apps. Note: Devices in scope of device compliance for shared devices will have a Single Sign-On Extensions payload deployed to them. If devices in the Applicable Group had a Single Sign-On Extensions payload deployed to them previously, device compliance will not be enforced on those devices until the old Single Sign-On Extensions payload is removed.   For additional infor

Today we are releasing Jamf Pro 11.13; highlights include: Admin SSOAdministrators can use Admin SSO as a single sign-on (SSO) method to log in to Jamf Pro. Admin SSO, configured in Jamf Account, allows you to use a centralized configuration for each Jamf product instead of separate single sign-on integrations. Admin SSO allows you to log into Jamf Account using either a cloud-based identity provider (IdP) or your Jamf ID. Self Service+Self Service+ is an enhancement to the Self Service end user application for macOS that allows users to access content and updates that have been preconfigured in Jamf Pro. Using Self Service+, end users can now view security status via the home screen's Security dashboard if Jamf Protect is installed on the device.   For additional information on what's included in this release, review the

Today we released Jamf Connect 2.43.0; this release includes minor bug fixes and improvements.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues: Jamf Pro Server [PI122416] When creating or modifying a configuration profile with a VPN payload that uses "Password" for the User Authentication type, Jamf Pro now correctly creates the profile with a valid AuthenticationMethod key. [PI123933] Jamf Pro no longer fails to display the scope for newly created deployable objects and saves scoping changes for existing objects as expected. [PI124225] Upgrading Jamf Pro no longer unexpectedly alters the required privileges for the Jamf Parent and Jamf Teacher apps to function.   For additional information on what's included in this release, review the r

Update 19 December 2024: Standard cloud upgrades are scheduled for the weekend of 20–21 December (details below). We appreciate your patience. Today we are releasing Jamf Pro 11.12; highlights include: New Restrictions for Computers and Mobile DevicesNew restrictions include support for bypass screen capture alert and the ability to restrict Apple Intelligence features. Computer Extension Attributes Page RedesignThe redesign features improvements to search, filtering, and display of computer extension attributes.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. See the latest