Self Service+

[BCPeteo]

Noticed this popup in Jamf promoting this feature. Its an eventual replacement for Self Service classic (which is set to go EOL in 2026) Its an APP that needs to be installed by Jamf. Any one using this? I see it does not seem to have the ability to run polices (only patch management ones)

More info here: https://learn.jamf.com/en-US/bundle/self-service-plus-documentation/page/Jamf_Self_Service_Plus_for_...

[Shyamsundar]

you can download the Selfservice + from you product page in the JAMF Account site and deploy it via Policy

[karthikeyan_mac]

Jamf Pro 11.3.0 released with Self Service+

Self Service+ can be configured in the same way as Self Service classic. To configure Self Service+ settings in Jamf Pro, navigate to Settings > Self Service. To access all of the configuration options available for Self Service+, you must use Jamf Pro 11.10.0 or later. Self Service+ can only be deployed to managed computers with macOS 13 or later.

For instructions on deploying and installing Self Service+, see the Self Service+ Deployment Guide.

[BCPeteo]

Ah, We are on 11.9 so do not see any Self Service+ settings. The question is with the new Self Service+ can you still add policies to self service (with the self service tab in policies?)

[vanschip-gerard]

The deploymeny guide is kinda... thin?
I downloaded the pkg, installed it on devices but when users open it they see nothing. Not the login nor any apps. We are on 11.12 so we should be good?

[sdiver]

Yes, documentation is...thin. I downloaded the Self Service+ PKG and deployed it to a few of my test machines. Upon launching the application, I am presented with the following dialogue box, asking for my account password...

Yeah, no end-user is going to read or understand what this is, so we're going to get questions. Upon entering my password and clicking Always Allow (which end-users aren't going to do, so it's going to reprompt them every time they launch it), I get into Self Service+. After a few moments all my policies for Self Service Classic appear.

[vanschip-gerard]

Ah, it needs people to sign in? We got Jamf setup without users, like not integrated to AD. Would be nice if Jamf added user integration to the requirements in their documentation. I will contact their support, see if thats really the case.

[sdiver]

Yes, we have employees sign into Self Service, as they may have access to more items based on who they are.

So if a user checks the box to save their credentials in Self Service Classic, when Self Service+ is launched, it will attempt to use those credentials from the keychain, and they are presented the dialog box above.

When I looked in Keychain Access, I deleted the two com.jamfsoftware.SelfService.* items. When Self Service+ was relaunched, the dialogue box didn't appear, and I was just asked to log in.

[vanschip-gerard]

Had a productive chat with their support. There are no requirements on the server side, it should just work. During the chat I installed Little Snitch to see if maybe the new Self Service needed a network address our network boys blocked. After I installed Little Snitch it just started working!

[Ondrej_Krupka]

Hey @sdiver , this Keychain prompt should not be appearing from Self Service+. The fix has been introduced in Jamf Pro version 11.11.0. 

[sdiver]

@Ondrej_Krupka Thanks. For what it's worth, we are running Jamf Pro 11.12.1.

[Ondrej_Krupka]

Thank you very much for the answer. I will relay this to the respective team.