Authentication for JamfAAD

[bwoods]

For those of you with a jamf/Intune integration, it looks like Jamf has added a notice for JamfAAD atuthentication. You may want to notify your users about these changes. I noticed this after upgrading to Jamf Pro 10.24.2.

[whitebeer]

We are also affected and our users raised tickets for that. I can't find any documentation on that either in the admin documentation nor the release notes. Also the dialog is not display correctly.

[FritzsCorner]

This explanation was posted out on the #jamf-intune-integration MacAdmins slack channel.

new steps with the integrated MSAL library for authentication. Due to the webpage redirection needed for the ASWebAuthenticationSession needed. macOS forces the prompt so more detail was added since it was not intuitive. But long term that opens the door for SSOe/cache for Microsoft then. So a step forward and back that hopefully leads to a leap way ahead in 2021.

In my case, I have separate accounts for my standard O365 account for e-mail/onedrive and an admin account for accessing the Azure/Intune consoles. I would get multiple prompts throughout the day to verify I was logging into the Jamf Native macOS connector. Limiting my Admin console access to another browser like edge/chrome seems to have eliminated the multiple prompts.

@whitebeer

Also the dialog is not display correctly.

This seems to only occur when the Mac is using Night/Dark mode.

[whitebeer]

I raised a ticket with jamf yesterday and got the following answer

I’ve checked internally and the change of the registration process are caused by Microsoft Authentication Library (MSAL v1.1) changes for macOS 10.15+ https://docs.microsoft.com/en-us/azure/active-directory/develop/customize-webviews

@FritzsCorner they also confirmed that the broken messagebox in dark mode is already classified as a product issue.
I complained about the missing official jamf-documentation about the pop-ups, the customer success team is investigating. For us there were a lot of customer incidents on that topic.

[bmargrave]

The only resolution I have seen is to set the machines default browser to Safari and then run the azure ad registration again or re-enrolling the device. Even then you have to have the default browser set to Safari.

[bwoods]

Upvote this: JamfAAD should use web view instead of | Jamf Nation Feature Requests. Complain to your customer success reps as well.