

To read Jamf’s full press release, click here. Jamf will continue to invest in integrations with top cloud identity providers such as Azure Active Directory to give admins simple authentication and account management capabilities while providing the best end-user experience.” Jamf Connect delivers on this critical need by giving admins the flexibility to leverage local users controlled by the same policies that admins depend on from a directory service or identity provider. In a press statement, CEO of Jamf, Dean Hager said, “IT admins need a way to more easily manage their devices and keep them secure, without having to worry about connectivity to a corporate network. Compare Jamf Connect VS Microsoft Azure Active Directory MOLP based on pricing plans, features, specification, platforms, user reviews and decide which. Jamf Connect allows for integration with other mobile device management providers, not just the company’s flagship product, Jamf Pro. NoMAD offers an open-source solution that remains free, while the commercial versions of NoMAD, including NoMAD Pro, NoMAD Login+, and PKINIT have been folded into a single solution and rebranded as Jamf Connect. Jamf initially entered into the identity authentication space through the acquisition of Orchard & Grove, the makers of NoMAD. Apple Business Manager is one of the most powerful services available to IT admins deploying and managing Apple at scale, and recently it got even better with support for Microsoft Azure Active Directory (AD) Last week, Apple announced that Apple Business Manager was adding support for federated authentication with Azure AD.
#JAMF AZURE AD PRO#
Authentication plugin: Users are enabled to log into their Mac with Azure Active Directory credentials. With enhancements to the Azure AD integration and Recovery Lock to the support for Account-driven user enrollment, we give you Jamf Pro 10.33.Im doing the same as in the screenshots except I am using the following for my plist.Ĭom.zscaler.Zscaler,, ,, integration of Jamf Connect and Azure Active Directory allows for provisioning of users from Azure Active Directory during an Apple provisioning workflow and is also a way to manage authentication and accounts in organizations that leverage Azure Active Directory for Macs. (Leveraging the JAMF\Conditional Access Intune enrollement).Īlthough Safari just shows a blank screen when getting to a login page that should take AzureAD creds.Ĭhrome and Outlook dont appear to be affected by the SSO config as they just show the usual AzureAD login prompts.Īnyone else make any progress with this config? I've been testing this config and was able to have Zscaler take the credentials from an Intune enrolled test device. We are using pure Azure AD and not using kerberos.Īny advice or information would be greatly appreciated. On our JAMF enrolled device we still get prompted for a username and password.

Opening Safari and going to automatically shows the user signed in and we can simply click on it to log on. We have done a test on mac which is Intune enrolled only and have used Intune to deploy the Single Sign On config profile and it works a treat. We are not sure if the required custom configuration is applying correctly as the documentation states we need to add the following key pairs for it to work. We have installed the Microsoft company portal app on our test device and deployed a Single-Sign On Configuration Profile to the test device and configured it as per Microsoft documentation in the above link. Our JAMF Connect application is working fine but we are unable to get SSO working for Safari/Chrome/Edge etc. We are trying to fine tune our SSO experience on our macOS devices.
