Setting Up Microsoft Entra ID Consent Flow

Jamf Account Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
Requirements

You must meet the general Requirements for SSO.

Note:

Organization privileges in Microsoft Entra ID are required to import verified domains from Microsoft. After setup, users configured in the IdP require only Profile and Group Read privileges in Microsoft Entra ID.

  1. Log in to the Jamf Account portal.
  2. Click Organization.
  3. Click SSO.
  4. Click New Connection.
  5. Under Connection Settings, click the Connection Type pop-up menu, and choose Microsoft Entra ID.
  6. Add a name for your connection and choose your hosting region from the Hosting region pop-up menu.
  7. Under Setup method, ensure Use Microsoft's admin consent flow for multi tenant applications is selected.
  8. Click the Connect with Microsoft button.
    Note:You can share a link to the page that opens after clicking Connect with Microsoft with other administrators on your team whom have privileges to make changes in Microsoft Entra ID.
  9. Log in to your organization's Microsoft Entra admin center.
  10. Click Accept on the Permissions requested pane.
  11. Configure the remaining settings in Jamf Account.
  12. Click Save.
Users configured in the IdP can now log in using SSO for all enabled Jamf applications.
Note:

Users can still log in to Jamf applications using Jamf ID if desired by clicking Continue with Jamf ID.

Specific user authorization roles and permissions must be configured in each Jamf application.