Hey Guys,I have MFA setup in Onelogin for my Jamf Connect app.  The Onelogin activity log shows an error that MFA is set on the Onelogin side. I opened a case with JAMF support and they say that I need the success codes in my PLIST, but they don't know what those should be. I opened a case with Onelogin, and they said that the OIDC standard doesn't support MFA.Anybody have this working? My intent is to have MFA presented upon MAC login.Thanks for your thoughts! 

Firefox manages certificates separated from the system certificates that are used by Safari or Chrome. To circumvent the issue that users are presented with the "certificate not trusted, add exception" notification, it is possible to add the certificates automated to the users firefox installations by utilizing the following commands: Importing Certificates on Firefox & code snippet for looking for the profile name I know that there is also the CCK utility, but that is also more or less a pain in the a**, especially when you want to maintain firefox installations that are already existing (and have a filled user profile). Firefox now provides the possibility to trust certificates that are stored in the system keychain by setting the key "about:config", "security.enterprise_roots.enabled" to TRUE. Mozilla Help This setting should also be stored somewhere in prefs.js, but i have not figured out how to fiddle around with this file without ruining the user profile. Now my questi

Edit: Disregard

I believe the issue is with the OS version line (Major and Minor), but I have very little experience in creating scripts. !/bin/sh # Get user logged into console and put into variable "user" user=ls -l /dev/console | cut -d " " -f 4osMajor=$(sw_vers -productVersion | awk -F"." '{print $2}')osMinor=$(sw_vers -productVersion | awk -F"." '{print $3}') sudo -u $user defaults -currentHost write com.apple.screensaver CleanExit -string "YES"sudo -u $user defaults -currentHost write com.apple.screensaver PrefsVersion -int 100sudo -u $user defaults -currentHost write com.apple.screensaver showClock -string "NO"sudo -u $user defaults -currentHost write com.apple.screensaver idleTime -int 600 if [[ $osMajor -eq 14 ]] && [[ $osMinor -ge 2 ]] || [[ $osMajor -ge 15 ]]; then sudo -u $user defaults -currentHost write com.apple.screensaver moduleDict -dict moduleName -string "iLifeSlideshows" path -string "/System/Library/Frameworks/ScreenSaver.framework/PlugIns/iLifeSlideshows.appex" typ

I have an environment where network users are logging into lab machines with Jamf Connect which creates a local user account for them, but when they go to use some apps for the first time the apps ask for permission to access common folders (Desktop, Documents, etc) and this can cause a problem because if they for some reason click Don't Allow when the app requests it then this has to be manually fixed by an admin ... and in the case of some apps like Adobe Premiere Pro the app won't even open if access to those folders is denied.Does anyone know of a way through Jamf of setting these app permissions for users when they sign in so the apps don't have to request access when the user first opens them?Thanks in advance.

Hello All,I'm still learning JAMF so I apologize if this is a basic question, but I would like some help with figuring out the best practice in order to manage multiple locations on Jamf Pro. My IT team is in charge of taking care of users in California along with users in England and I am trying to find out what is the best practice in order to do so. For example, people in England might need to have access to different applications, or if we needed to modify our Zero Touch Deployment for them, we would like to keep it separate from our California side.I have looked into using Sites that is offered within Jamf Pro, but I hear that this is not the best way to go about this. 

I apologize if this has been asked and answered or documented somewhere, but I've looked and can't really find my answer.  I'm looking to change the distribution method for an app from Install Automatically to Make Available In Self Service. I know how to do that, but my question is what will this do to devices that already have the app installed? Will the app be pulled and require them to download it, or will it remain on device? Thanks!-Matt

I am trying to create a policy in Self Service that is scoped out to all devices, but is only accessible for a certain local admin account to install/run. When devices are enrolled, a default local admin account is automatically created and we do not use LDAP, so I'm trying to find a way to limit this policy from being run by unauthorized users. Is there any way to accomplish this? Or is there perhaps a way to require admin credentials be entered before the policy can run?The policy works great when I scope it to a test device, but as soon as I add the local admin account to the limitations, the policy is removed and disappears from Self Service. 

Hello to all,I hope everyone is well in the community :)I have a recurring problem with macOS Ventura :when I upgrade from macOS Monterey to Ventura, a minor update or when I try to register a Mac directly, after restart, I get a blank screen with a wheel that spins without stopping.I have the impression that it is the Form of Address window that wants to be displayed, I only have the "back" and "continue" buttons at the bottom (they do not work).When I restart the mac, everything is fixed, I can authenticate and work again.Has anyone encountered this problem before?Thx for your returns

Hi is there a way to push certificate and "Trust" it via JAMF School? I am currently installing it manually and need to select "Always trust.    

Aside from not seeing the Jamf Connect screen after reboot (separate issue), we are also seeing Guest wifi not popping the acceptance splash screen during the Jamf Connect login. Does Jamf Connect create a blocker for this?

I am trying to defer macOS Sonoma from showing up in Software Update. I have the deferral set for 90 days. Some Macs continue to show Sonoma in Software Update. I was using a profile that used JSON for the settings. When this profile appeared to not be working properly, I created a new profile using JSON that I got from Jamf this morning. The JSON is below. I was advised to create two profiles. One delays minor updates. The second delays major upgrades. Most Macs seem to work with this profile correctly but there are a few that don't. There seems to be nothing special about these Macs. Has anyone else ran into this issue? I would appreciate some advice on this.{ "title": "com.apple.applicationaccess", "description": "", "properties": { "enforcedSoftwareUpdateMajorOSDeferredInstallDelay": { "title": "Enforced Software Update Major OS Deferred Install Delay ", "description": "", "property_order": 5, "anyOf": [ {"t

Just wondering if anyone has come up with an extension attribute for Intune integration. Looking to use a smart group to keep track of devices (or users) not yet enrolled in intune.

Hello,Is there download URL for Safari 17 for Ventura? Thanks!

Hello, I use the Erase-Install to update/upgrade our Macbooks. But i have a problem. Task is works, macbooks download and install the package then reboot the device. But after reboot erase-install task start again then it dowload the same package again. And when i check the logs from jamf pro, it is "Pending" stiuation. Can you tell me what is wrong?Thank you. 

HiWe have a customer with managed Apple MacBook Pro 16" (M2 Pro, 32GB, 512GB).As a backup solution they use the Synology Active Backup for Business solution with the Mac agent.I face problems with the creation of the hidden user, which is need for backup tasks, etc.URL: https://kb.synology.com/en-me/DSM/tutorial/Backup_failed_because_of_hidden_user_issuesThe creation of this hidden user fails, when the password of a filevault enabled user is needed. Steps I tried already are:- Changing the user password to a simple one (No special characters only letters and numbers)- Used administrator account with filevault transfered token.- Tried the root account with filevault transfered token. I didn't disable Filevault, as this would be my last option. Did somebody faced this problem or a similar one? Does someone has a suggestion? Thank youKind regardsDaniel

Hi there,We're currently getting an influx of users who need to "update" simple apps like Keybase but those updates require admin permissions. To work around that requirement I add an update script to the Self Service portal which gets the job done but is there any way to maybe create a PPPC policy that will permit the user to update a version of software, I'm not sure what type of access is needed i.e full disk access or system file access that is being prompted in the admin credentials since it's non-descript.I know there are also other solutions like Admin By Request that allows on-demand access to user elevation.

Does anyone have an idea or experience with this issue?When you try to log in to the JAMF PRO it's stuck on the login page not giving any error URL being accessed -:  https://Mycompany:8443/ Username/password - my company credentials (SSO)JAMF Pro runs on a server 2019Tried to access the JAMF Pro using the above link Enter my username and password no response from the page.Tried with the wrong username and password to check still no response/error from the page.Restarted the Apache and the Windows server still had the same issue.Could someone help?Thanks in advance 

In my Restrictions profile for our pre-k kids I would like to hide this as it will most certainly be a distraction. However when I go to Apps/App Usage/Some apps not allowed and start typing Freeform it does not come up I the list of apps/Bundle ID's. Thanks,Robert

Starfall now supports MDM config, but they do not have a template and thier directions are very sparse.Here is what it says, and my question is how to put this into JAMF:MDM, or Mobile Device Management, allows an administrator to deploy and authenticate the Starfall app on multiple mobile devices. Starfall now supports MDM key authentication in the Starfall app, versions 3.1.68 and higher from Google Play and the Apple App Store.To configure the Starfall app with MDM, you will need your Starfall administrator email address and an MDM key.Your MDM application may prompt you for the following: Key (case sensitive) Type Value ExampleEmailStringStarfall administrator email addressmyemail@school.eduMDMKEYString(Find in your Account Settings per instructions above)SEF123456

I'm a little confused that on my actual machine, it says that macOS Sonoma is version 14.0 yet in Patch Management it's looking for version 19.0.2.What is the difference? We have had other machines on the network update and they not showing under Patch Management either.

hi guysI hope someone can help. I am planning to push an SSL certificate to all of our iPad devices as part of safeguarding rules. We need to generate a report on this, but I am struggling to find a way to push our SSL certificate to iPads using Jamf School, which does not seem to have an option to install a certificate.thank you in advance

I need to install Jamf Protect on some Macs owned by staff and not on our MDM. When we evaluated Jamf Protect I had instructions for installing Jamf Protect without a MDM but I do not see them any more. Does anyone have a link to the instructions?

I need help looking for a way to limit Jamf users' access to information under the Inventory tab when viewing a device. Specifically is there a way to hide things like hardware and purchasing? I have extension attributes set up as pop-ups and I want to limit certain groups' access to specific ones in my organization.

We deployed a Configuration Profile with a VPN payload ever since we started using Jamf Pro to M1 Macbook Airs running MacOS 12.5 at the time the CP was deployed.  Everything worked fine. Recently, we needed to add a new M2 Macbook Pro running MacOS 13.6 and suddenly the VPN profile would not work and only display "An unexpected error occurred". What's weird is that if we create a new Configuration Profile with the EXACT same payload settings and deploy it AFTER the entire provisioning process is complete, then that new Configuration Profile allows the user to connect to the VPN. Thinking it may just be a fluke, we re-provisioned the Macbook and assigned the new CP to it and it still breaks with the same error message. And once again, if I create either a new CP in Jamf Pro or manually create the VPN under Settings, it works just fine. I've been trying to locate the log file for the VPN but there is no /var/log/ppp and I've also tried to use Console to look at logs but can't