Skip to main content
Question

Jamf Connect Login- configure security groups as admin during the setup

  • April 24, 2020
  • 5 replies
  • 24 views
P
Forum|alt.badge.img+3

Does anybody knows how to setup a security group which will stay as admin on all macs using jamf connect login.
I know we can use OIDC settings like OIDCAdmin or OIDCAdminAttribute
but I'm struggling to put them through the config.

Did anyone use this feature with your setup? I'm using Azure as an IdP

      5 replies

      P
      Forum|alt.badge.img+3
      • Pratik
      • Author
      • New Contributor
      • April 24, 2020

      I may have missed to add this- I have configured the Admin and Standard roles in manifest file from my Azure App Registration setting. The question is- How do I use the OIDCAdmin to create same users/groups with Admin rights in Azure

      M
      Forum|alt.badge.img+4
      • mlawniczak
      • New Contributor
      • April 24, 2020

      In your Jamf Connect plist make sure you configure:
      OIDCAdminAttribute roles

        S
        Forum|alt.badge.img

        Thanks..What I'm struggling to understand is shall I use only OIDCAdmin or both OIDCAdminAtribute?

        M
        Forum|alt.badge.img+4
        • mlawniczak
        • New Contributor
        • April 27, 2020

        We're using both.
        OIDCAdmin = Admin
        OIDCAdminAttribute = roles

          R
          Forum|alt.badge.img+1
          • richard.lozano
          • New Contributor
          • September 4, 2020

          Hello, I am having the same issue here. I cant seem to get it to distinguish admin vs standard. All our accounts are being set to standard even if I am an admin. This is what I have configured on the login plst.

          <plist version="1.0">
          <dict> <key>OIDCClientID</key> <string>Removed on purpose</string> <key>OIDCProvider</key> <string>Azure</string> <key>OIDCROPGID</key> <string>removed on purpose</string> <key>OIDCRedirectURI</key> <string>https://127.0.0.1/jamfconnect</string>
          </dict>
          </plist>

          Terms & ConditionsCookie settingsAccessibility statement