Creating an Application Registration with a Custom API

Jamf Connect Documentation
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

To create an application registration with a custom scope for Jamf Connect, Microsoft Entra ID requires an additional application registration with a custom API.

Requirements

Access to your organization's Microsoft Entra ID admin console.

  1. Log in your organization's Microsoft Entra admin center.
  2. Click Entra ID > App Registrations.
  3. Create a new app registration.

    Name this application Jamf Connect - Conditional Access Policy API. Do not configure a redirect URI for this application.

  4. Select Accounts in this organizational directory only under Supported account types.
  5. Click Register.
  6. In the sidebar, click API permissions. Verify that admin consent has been granted for the organization.
  7. In the sidebar, click Expose an API.
  8. Set the Application ID URI.

    A default entry is acceptable for this field.

  9. Click Add a scope.
  10. In the Scope name field, enter jamfconnect.
  11. Set the Who can consent field to either available option.
  12. Add text in the Admin consent fields to be accepted by the administrator.
  13. Click Add scope.
  14. Click Copy to copy the scope for later use as the OpenID Connect Scopes (OIDCScopes) setting.

This application allows the application that calls the custom scope to borrow additional API permissions.