JAMF Cloud Self Enroll User Screen

[BrandonMaher]

When trying to use self-enrollment we can authenticate using SSO, but on the "assign to user" screen, we aren't able to pick anyone, even if they have a JAMF user set up. Do you have to have LDAP for this? Off-prem LDAP is not supported at our organization.

[PC-Outreach]

LDAP is required AFAK

[Tribruin]

Setting up a Cloud Identity Provider will work as well, but that only works with Azure and Google.

[BrandonMaher]

@RBlount we use an IdP for SSO to get authenticate users into the self enroll, but that seems to be different, correct?

[Tribruin]

@BrandonMaher Yes, SSO and Cloud Identity are complementary settings. With Cloud IDP setup, you can use cloud users and groups in the same way you would use LDAP users and Groups. So, you can assign computers to them, scope them to policies and profiles, etc.

But, right now, it only works with Google and Azure. So, if you use another IdP, the cloud identity won't work.

Cloud IDP Admin Guide