I recently worked on deploying Jamf Connect for a client and I was very pleased with the overall ease of setup and deployment. One of the reasons why we wanted to do this was to bring MFA to the Mac login experience. We used Duo Security for MFA. Since Azure is already setup for authentication through Duo, I did not need to do anything different. When an Azure user logs in, they are prompted to respond through Duo. For the few issues that I had, Jamf Support was extremely helpful (as they always are!) The issues were mainly caused by me not setting up something correctly. Overall, I was very impressed with how Jamf Connect works. I think binding Macs to AD is useless. So far, I have ran into only one major issue. For my own company, we were stalled on deploying Jamf Connect because the MFA solution we use internally uses SAML authentication. It would not work with Jamf Connect. When we disabled MFA for the account I was using for testing, the login process would complete. The solution we use is called Secret Double Octopus. Personally, I HATE this MFA solution but I don't get to make the decisions for what to use.
