I just found this:
Is there a reason why an Azure only setup wouldn't work? According to the Jamf documentation, it should, but I have not been able to test it yet.
We are seeing the expiration password counter. But some of our end-users see a -22 (for example) counter in the menu bar or after a successful password change there is the wrong number of days. Does anyone see this and have success correcting it?
We have a K-Realm and the configuration is set correctly. it is more annoying than anything.
Being on a VPN sometimes fixes this and sometimes it does not.
kinit and reentering the K-Realm password for the end user and restarting Jamf Connect do not correct the counter.