Jamf Connect Login- configure security groups as admin during the setup

[Pratik]

Does anybody knows how to setup a security group which will stay as admin on all macs using jamf connect login.
I know we can use OIDC settings like OIDCAdmin or OIDCAdminAttribute
but I'm struggling to put them through the config.

Did anyone use this feature with your setup? I'm using Azure as an IdP

[Pratik]

I may have missed to add this- I have configured the Admin and Standard roles in manifest file from my Azure App Registration setting. The question is- How do I use the OIDCAdmin to create same users/groups with Admin rights in Azure

[mlawniczak]

In your Jamf Connect plist make sure you configure:
OIDCAdminAttribute roles

[sMacEngineering]

Thanks..What I'm struggling to understand is shall I use only OIDCAdmin or both OIDCAdminAtribute?

[mlawniczak]

We're using both.
OIDCAdmin = Admin
OIDCAdminAttribute = roles

[richardl9898]

Hello, I am having the same issue here. I cant seem to get it to distinguish admin vs standard. All our accounts are being set to standard even if I am an admin. This is what I have configured on the login plst.

<plist version="1.0">
<dict> <key>OIDCClientID</key> <string>Removed on purpose</string> <key>OIDCProvider</key> <string>Azure</string> <key>OIDCROPGID</key> <string>removed on purpose</string> <key>OIDCRedirectURI</key> <string>https://127.0.0.1/jamfconnect</string>
</dict>
</plist>