We have enabled Azure AD as a Cloud Identity Provider, as well as Azure AD SSO. We also have some iPads assigned to a Prestage that features an Enrollment Customization that includes an SSO Authentication pane. The pane is displaying as expected on the device, and I can sign in through that pane using my Azure AD credentials.We have enabled "Collect user and location information from Directory Service" under Inventory Collection settings.However, the "User and Location" portion of the device inventory remains blank. We've gone through multiple wipe and re-enrollment rounds with this device, as well as an "Update Inventory" MDM command... nothing.Jamf Pro’s documentation says that assigning a user to a computer or mobile device can be done “during user-initiated enrollment (LDAP users only)” - does this not include the Cloud Identity Providers such as Azure AD? Or do we have something misconfigured somewhere?

Hi All,I've never had a problem before using composer to package apps until version 10.28. When packaging a drag and drop app such as Krita or Blender, Composer has started displaying this error message during the 'Build as PKG' build process - Couldn't communicate with a helper application. I've never seen this before, it's doing it on a clean install of Catalina 10.15.7 and on a different machine with an upgrade to Big Sur 11.2.3. It will package VLC successfully but not Krita or Blender.It will create DMGs ok for all three. All three are given the same owner/group & permissions before creating a new PKG. Root, Admin and 755. Has anyone else encountered this issue and were you able to resolve it?Thanks for any info!

I uploaded the Protect plan to Jamf Pro configuration profile. I was wondering if Protect also works on devices? I tried to upload the same file to the devices but it ends up failing. If there is any documentation for deploying to devices, please point me to it!

Hi everyone,Has anyone run into a screensaver issue on macOS 15 after enforcing the CIS Level 1 benchmark with Jamf Pro?When the screen locks (either manually or from inactivity), the background just turns black, and the configured screensaver doesn't start.If anyone has seen this or knows of a fix, any guidance would be greatly appreciated.Thanks!

We’ve recently removed admin rights on Macs for all of our users. Does anyone know of a way to enable users to always be able to administer preferred/saved Wifi networks which are saved on their machines without having to grant them temporary admin rights?

We have a configuration in place where all company MacBooks receive a push notification prompting users to activate FileVault.After entering the password, the FileVault recovery key is successfully escrowed and the process is completed as expected.However, one of our colleagues continues to receive the FileVault activation prompt several times a day — even though the recovery key has already been successfully stored in Jamf Pro.This behavior seems to affect only this specific device. How can we stop this behavior?

Hello, I am trying to create a configuration profile on Jamf to deploy it to my mac laptop.The .mobileconfig is built using the template mentioned here (docker.mobileconfig): https://docs.docker.com/enterprise/security/enforce-sign-in/methods/#macos-configuration-profiles-method-recommended When I try to upload this in Jamf (we use Jamf Pro) using the “Upload” option shown below, it fails with the error “File Cannot be processed” I am able to create the profile using the “New” button where I copy and paste my profile in the Property List box.I don’t suspect anything wrong with the template structure as using “New” button I am able to upload it and also I am  able to directly add my profile on my mac laptop.Any idea why I am getting “File Cannot be processed” error when I use “Upload” option ?I have reviewed few old posts reporting similar error, but they are slightly different than my issue.Appreciate any help.

Hey,I’ve tried looking for this all over and found some partial solutions that don’t really work so I wanted to ask here.I’ve been asked to set up several iMacs to auto-log off or reboot after 30 minutes of inactivity AND (this is the kicker) delete all files on Desktop, Downloads, and Documents.I found the Configuration Profile Login Window setting to auto log-off but I’ve seen that if people left unsaved documents over it doesn’t work. It seems to me some scripting is needed here and that’s still a weak spot for me so I’m putting this out to this community in the hopes of some help.Thanks in advance!

Hi all,I have been using a script that sets the Recovery Lock password on Silicon Macs without the correct Recovery Lock password already set using the following APIhttps://JAMF_PRO_URL/api/preview/mdm/commands  As mentioned here:https://learn.jamf.com/en-US/bundle/technical-articles/page/Recovery_Lock_Enablement_in_macOS_Using_the_Jamf_Pro_API.htmlHowever it looks like the /preview/mdm/commands has been deprecated, can someone confirm and is there another way to do it or can it only be done with PreStage now? Source: https://developer.jamf.com/jamf-pro/docs/privileges-and-deprecations

In iPadOS there is a new system app, Phone.But it doesn’t seem to be blockable using a Profile, since it doesn’t seem to be present in the list of Default Applications.Has anybody found the same issue? And, more importantly, a solution?Thanks in advance.

Trying to install Chrome for Mac using the app installer.  When it installs, chrome will no allow me to update manually.  If I manually install chrome, then there isn’t an issue.I do not have a configuration profiles loaded for chrome.

Anybody else experiencing the same? 10+ tenants I am unable to access.  Believe our authentication sever has been moved again. But cant reach any of the official support channels.  EDIT: Acc manager has now confirmed it is tied to the AWS Outage so out of their hands at this time. 

I have Mac Apps configured in Jamf Pro to keep applications updated including Jamf Connect. It shows the latest as 2.45.1 but 3.4 is on the download site.  There is a different app called Jamf Connect Login..  Should I be using that or is there a reason to remain on 2.45 (No school apps)

No text available

In other MDM’s, when we enable Lost Mode, we have the ability to see where the device location is after it successfully enables.In JAMF Pro, I can put a phone into Lost Mode, I can see a “DeviceLocation” command sent to the device, but where can I see a map of that device’s location?

I am trying to change a computer's name by editing it in the computer's Jamf Pro inventory > General page. I have a policy to change all of my managed computers' names to match the names set in Jamf, so theoretically this name change should be pushed out to the machine after I updated it in Jamf. This is an iMac running MacOS14.4.1. But when I change the name on this machine and save it, the page reverts back to the default "iMac" name. I've done this hundreds of times and have never had an issue getting a name change to stick in the Jamf Pro inventory. Has anyone else seen this issue? 

Hi all, I've copied and pasted together scripts I've found on here to set up automated patching. In it is a piece that checks if the process is running, and if it is, it should abort. This works with for example "Microsoft Excel" and "Google Chrome" but doesn't work for "Microsoft Teams" or "Firefox". Has anyone run into a similar problem? I can run "pdkill -f firefox" and that will kill the process locally on the test Mac but it doesn't work with the script below. #!/bin/bash #Automatically downloads latest Firefox package and installs #Created 6-2-2020 by Shaquir Tannis #Influenced by https://www.jamf.com/jamf-nation/discussions/35211/updates-to-google-chrome-deployment-for-macos#responseChild200000 process="$5" processrunning=$( ps axc | grep "${process}$" ) if [ "$processrunning" != "" ]; then echo "$process IS running, we do nothing now" exit else

Hi all, Background:I’m fairly familiar with the Apple ecosystem but just not getting into managing Apple devices. I am working on getting MacOS to a baseline standard internally at my company. Issue:SelfService+ is working great but I’m noticing that I need to sign into it every time the app is launched. Is this normal?  Side Note:I do have SSO turned and working, which makes this less of an issue, but I was experiencing it before SSO was enabled as well. Thanks! 

Hello all,I am in the process of rolling out OneDrive to our Mac environment.  I assigned the app from the Jamf app catalog and put together a plist with all of our settings.  I discovered that OneDrive has to have full disk access in order to automatically back up the desktop folder.  I used the Jamf PPPC tool to grant onedrive full disk access, however it does not seem to take.  I check in system settings → general → device management and I see the config profile, however when I run sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db \ 'select client from access where auth_value and service = "kTCCServiceSystemPolicyAllFiles"' in Terminal, onedrive is not listed as one of the apps that has full disk access.  Any ideas?

Hey Everyone, Just a quick question, how did you introduce self service to your users who are not used to serving themselves? Do you send out an email explaining what Self Service is? We are almost done with our pilot testing and are just about ready to fully roll out Casper to our environment, so we just want to get some ideas of how others have introduced Self Service? Thanks

Hey,Our agent for macos requires spficif bluetooth permissions to function properly. For most other MDMs we enable this by sending a mobile config containing BluetoothAlways key in Services, as documented here. JAMF seems to remove this key from mobileconfigs uploaded through UI and also directly through API. Example section that needs to be included in the mobileconfig: <key>Services</key><dict><key>BluetoothAlways</key><array><dict><key>Allowed</key><integer>1</integer><key>CodeRequirement</key><string>anchor apple generic and identifier "com.sentinelone.sentinel-helper" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "4AYE5J54KN")</string><key>Identifier</key><string>com.sentinelone.sentinel-helpe

Has anybody figured out how to get Language Chooser to run at first boot?if I make my image from a Install OS X.app it seems to assume that since i ran that App in English that is the language I will want everybody to use, and well my customers tend to be Global. I can make it run, but it runs on top of setup assistant and well its ugly and can be problematic if people start clicking on setup assistant before language chooser appears. Any ideas would be greatly appreciated.

I just set up a new iPad for a teacher and after enrolment all apps that should be deployed are marked as Waiting for Licenses despite having hundreds available. Things I've tried to resolve: Restart iPad Refresh Apple VPP token Re-apply profiles Re-apply apps Reset iPad and re-enrol   Nothing works. Still stuck on "Waiting for Licenses". Does anyone have any ideas about what I should do to resolve this?

If I turn off our current Cloud Identity Provider configuration with Google, will that remove the existing attributes from users’ User and Location fields in their profiles? My understanding is that it won’t, which would be a good thing in my case. I’m transitioning to Okta LDAP and want to make sure the current attributes remain, since I have smart groups based on department fields.

My organization uses Jamf Setup and Jamf Reset for our users to sign in with their SSO account with Microsoft Entra ID. The user will sign in with Jamf Setup at the start of their shift and then sign out at the end.   However, Jamf Reset frequently does not fully sign the user out of their SSO account, leading to the next users unable to log in.   I have found that a power cycle and attempt to sign out using Jamf Reset usually fixes this problem.   From what I can tell from comparing our Jamf Reset App configuration and "Managed App Configuration for Jamf Reset" documentation on learn.jamf.com, we have the standard configuration set up.   Has anyone else ran into issues with Jamf Reset "hanging up"?