Creating Jamf Connect Configuration Profiles Using Jamf Pro

Jamf Pro Documentation 11.16.0

Solution
Application
Content Type
Technical Documentation
Utilities & Services
version
11.16.0
ft:locale
en-US
vrm_version
11.16.0

You can use Jamf Pro to create a computer configuration profile that configures Jamf Connect settings with the Application & Custom Settings payload. This payload allows you to select Jamf Connect preferences, automatically generate a PLIST file, and configure the scope. Jamf Pro can use configuration profiles created in this way to automatically deploy and update Jamf Connect.

Depending on which components of Jamf Connect you plan to use, you must configure settings for the following Jamf application domains:

  • com.jamf.connect

    Includes all settings for the Jamf Connect menu bar app

  • com.jamf.connect.login

    Includes all settings for the Jamf Connect login window

Keep the following in mind when you configure Jamf Connect:
  • You can configure multiple Application & Custom Setting payloads in a single configuration profile. This allows you to configure multiple preference domains in a single configuration profile.

  • You can split your Jamf Connect settings into multiple configuration profiles written to the same preference domains. This allows you to easily add or remove a subset of Jamf Connect settings (e.g., enrollment-only settings or updating your product license).

Requirements
  • Integration with a cloud identity provider (IdP)

  • Familiarity with your IdP's minimum authentication settings

  1. In Jamf Pro, click Computers in the sidebar.
  2. Click Configuration Profiles in the sidebar.
  3. Click New .
  4. Use the General payload to configure basic settings, including the level at which to apply the profile and the distribution method.

    Only payloads and settings that apply to the selected level are displayed for the profile. To distribute the profile during enrollment using a computer PreStage enrollment, ensure you create a computer-level configuration profile.

  5. Use the Application & Custom Settings payload to configure Jamf Applications.
  6. Click Add .
  7. Choose "com.jamf.connect.login" from the Jamf Application Domain pop-up menu.
  8. Choose a version of the preference domain you want to configure.

    The latest version is recommended.

  9. Select "Jamf Connect Login.json" from the Variant pop-up menu.
    The Jamf Connect preference domain settings display.
  10. Configure Jamf Connect settings.

    To determine which settings are required, see Authentication Settings.

    Best Practice:

    Jamf recommends deselecting any unused settings from the payload. This prevents Jamf Pro from including blank key-value pairs from the configuration profile.

  11. If you plan to use the Jamf Connect menu bar app in your organization, click Add to configure settings for the Jamf Connect menu bar app preference domain (com.jamf.connect).
  12. Click the Scope tab and configure the scope of the profile.
    Note:

    Ensure the scope of the profile contains the computers that are in the scope of the PreStage enrollment.

  13. Click Save .

Your configuration profiles are distributed to target computers when they check in with Jamf Pro.

If you configure deployment and update settings for the newly created profile, Jamf Pro installs or updates Jamf Connect on target computers.