No SSO or is it just me?

mainelysteve
Valued Contributor II

Anybody else getting double logins this past week in JS? My instance url takes me to a Jamf ID login but instead of SSO it takes me to the Jamf School login where I have to sign in again.

Not a cookie issue as it happens in Chrome, Safari and other Macs and iPads. 

Just wanted to check my sanity before going to support.

1 ACCEPTED SOLUTION

mainelysteve
Valued Contributor II

NVM. Checked the release notes. They changed the login process. It apparently checks if you have a Jamf ID and if you don't it redirects back to the old Jamf School login. Apparently it's not working too well. Putting in a ticket.

View solution in original post

6 REPLIES 6

mainelysteve
Valued Contributor II

NVM. Checked the release notes. They changed the login process. It apparently checks if you have a Jamf ID and if you don't it redirects back to the old Jamf School login. Apparently it's not working too well. Putting in a ticket.

ryan_w
Contributor

We are having similar issues, also having to constantly log back in even after short periods of idle time.

WadeAAces
New Contributor

Same issue here. Did you find a solution? I can only login with my tenent level login on JAMF School. Then I get about 5 to 10 minutes of idle time before logout. Really wish OIDC or SAML was not a Pro only featur

I am still experiencing the short idle timeout too.  I have not had time to contact support about it yet.

I agree it would be great if you could connect JAMF School to your main IdP for admin logins.  Seems like it would enhance security too.

WadeAAces
New Contributor

Thank you Ryan for the reply. So, I did get support to at least say that the two login screens is typical of JAMF ID accounts with no 2FA. I enabled that this AM on my JAMF ID account.

I will see if I clear cookies etc if that fixes now. I was having a longer timeout period when I was able to login with JAMF ID vs just the JAMF School login.

mainelysteve
Valued Contributor II

Yes, session length is still an issue. It was fixed between November and January but when then it reverted back after that. I was told by my previous account rep at Ohio's education tech conference last month that an update may be coming to allow session time changes, but who knows. 

I was able to get SSO setup through our Jamf account now logins for Jamf School flow through our IdP. You have to claim your domain first then setup an OIDC connection. Works very well. I chose to leave Jamf Pro alone as I like how it works now, but School and Protect now login without much fuss.

https://learn.jamf.com/en-US/bundle/jamf-account-documentation/page/Jamf_SSO_with_Jamf_Account.html