Jamf Pro Entra Integration

jaypee
New Contributor II

During integration of Jamf Pro with Entra, a Global Administrator account is needed and this account must exist on the Entra tenant. Often, we use the same account to set up the app registrations for Jamf Connect and to create the various changes for conditional access exemptions, etc.

Once these are set up, can this Global Administrator account be safely removed from Entra without affecting any of the integrations or applications created?

1 ACCEPTED SOLUTION

jaypee
New Contributor II

Confirmed with Jamf Support that once the integrations have been set up, the account is no longer needed.

View solution in original post

3 REPLIES 3

jeetendragupta
New Contributor II

The global administrator account used for setup must remain active. In most cases, with SSO using Entra, deactivating this account will cause unauthorized access issues during sync. A generic admin account can be used instead of a named account.

jaypee
New Contributor II

Thank you. Is this documented somewhere?

jaypee
New Contributor II

Confirmed with Jamf Support that once the integrations have been set up, the account is no longer needed.