Initial Password Settings

Jamf Connect Documentation
Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
  • Domain —com.jamf.connect.login
  • Description —

    Used to determine how Jamf Connect creates a local password during account creation and if a user's local and network passwords should be verified during each login to make sure they are in sync.

Setting

Description

Create a Separate Local Password

OIDCNewPassword

 

If enabled (set to true), this setting prompts users to create a new password for their new local account.

If disabled (set to false), this key prompts users to re-enter their network password, which also becomes the local account password. This ensures a user's network and local password are synced during user creation.

Note:

This setting is disabled (set to false) by default. If the key is undefined or uninitialized, the setting will still be set to false.

<key>OIDCNewPassword</key>
<true/>

Client ID (Password Verification)

OIDCROPGID

Specifies the Client ID of the registered app in your IdP used for authenticating the user's password via a resource owner password grant (ROPG) workflow. This value usually matches the OIDCClientID setting.

<key>OIDCROPGID</key>
<string>9fcc52c7-ee36-4889-8517-lkjslkjoe23</string>

Create Jamf Connect Keychain

CreateJamfConnectPassword

Automatically create a keychain item for Jamf Connect during the account creation process. This allows Self Service+ to populate user credentials in the sign-in window when the app is first opened.

Note:

To use this setting, the Create a Separate Local Password (OIDCNewPassword) setting must be disabled (set to false).

<key>CreateJamfConnectPassword</key>
<true/>

Password Verification Success Codes

ROPGSuccessCodes

Specifies an array of strings that contain error codes from your IdP during an ROPG password verification, which should be interpreted as successful by Jamf Connect.

For possible error codes that may need to be configured in your environment, see Microsoft Entra authentication and authorization error codes documentation from Microsoft.

If you use OneLogin and multifactor authentication in your environment, set this setting to MFA.

<key>ROPGSuccessCodes</key>
<array>
<string>AADSTS50012</string>
<string>AADSTS50131</string>
</array>