Creating a Jamf Connect App Registration in Microsoft Entra ID

Jamf Connect Documentation
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
To integrate with Microsoft Entra ID, you must create an app registration for Jamf Connect.

Training Video

Watch the Configure Jamf Connect for Entra ID video to learn how to integrate and configure Jamf Connect with Microsoft Entra ID.

You can require users to sign in with their Microsoft credentials by integrating Jamf Setup with Microsoft Entra ID (AD). You can also use Microsoft Entra ID to configure user roles that match roles available in Jamf Setup. These roles are sent as claims in a user's ID token when they successfully sign in with Jamf Setup.

Note:

If you are also using Jamf Reset, you can use the same app registration for both apps.

  1. Log in your organization's Microsoft Entra admin center.
  2. Click Microsoft Entra ID in the left sidebar.
  3. Click App registrations, and then click new registration.
  4. Enter Jamf Connect or something similar into the Name field.
  5. Select Accounts in this organizational directory only in Supported account types.
  6. (Optional) Choose "Public client (mobile & desktop)" from the Redirect URI pop-up menu, and then enter https://127.0.0.1/jamfconnect in the Redirect URI field.
    Note:

    This step is optional if you are only using Self Service+.

  7. Click Register.

Your app registration is added to Microsoft Entra ID.

You can now edit the app registration to grant admin consent for API calls and modify authentication settings.

Note:

If you are using Jamf Connect with Automated Device Enrollment (formerly DEP), remove this application from any conditional access controls. The user will be signing in to the computer before conditional access can be enabled.