Enabling Passthrough Authentication

Jamf Connect Documentation

Solution

Application

Jamf Connect

Content Type

Technical Documentation

Utilities & Services

ft:locale

en-US

Passthrough authentication is not enabled by default and must be enabled in a Jamf Connect login window configuration profile.

Requirements

Passthrough authentication is only supported in IdP environments that use the OpenID Connect (OIDC) authentication protocol.

To enable passthrough authentication, use the Jamf Connect Configuration app or Jamf Pro's Application & Custom Settings payload to enable the Use Passthrough Authentication (OIDCUsePassthroughAuth) setting in a Jamf Connect login window configuration profile.

Microsoft Entra ID, OneLogin, PingFederate, or any IdP using the OpenID Connect (OIDC) protocol

Make sure the a Create a Separate Local Password (OIDCNewPassword) setting is set to false.

<key>OIDCUsePassthroughAuth</key>
<true/>
<key>OIDCNewPassword</key>
<false/>

Google Cloud ID

Make sure the Create a Separate Local Password (OIDCNewPassword) setting is set to false if the Create Jamf Connect Keychain (CreateJamfConnectPassword) setting is set to true. If the Create Jamf Connect Keychain (CreateJamfConnectPassword) setting is set to false or is not in use, set the Create a Separate Local Password (OIDCNewPassword) setting to true.

<key>OIDCUsePassthroughAuth</key>
<true/>
<key>OIDCNewPassword</key>
<true/>