Creating an Enrollment Customization Configuration

Jamf Pro Documentation 11.16.0
Solution
Application
Content Type
Technical Documentation
Utilities & Services
version
11.16.0
ft:locale
en-US
vrm_version
11.16.0
Requirements

  • Mobile devices with iOS 13 or later, or iPadOS 13 or later

  • Computers with macOS 10.15 or later

  • To add a Single Sign-On Authentication PreStage Pane, you must have Single Sign-on enabled in Jamf Pro. For more information, see Single Sign-On (SSO).

  • Enabling Jamf Pro to pass user information to Jamf Connect requires Jamf Connect 1.12.0 or later. In addition, you must ensure Jamf Connect is configured and integrated with your identity provider (IdP).

  • To add a Directory Service Authentication PreStage Pane, you need Directory Service server set up in Jamf Pro. For more information, see Microsoft Entra ID Migration Assistant and LDAP Directory Service Integration.

  1. In Jamf Pro, click Settings in the sidebar.
  2. In the Global section, click Enrollment customization .
  3. Click New.
  4. Enter a display name and description for the Enrollment Customization configuration.
  5. Choose a site to add the Enrollment Customization configuration to from the Site pop-up menu.

    This allows you to add the configuration to a PreStage enrollment in that same site.

    Note:

    If you have site access only, the profile is assigned to the applicable site automatically and the Site pop-up menu is not displayed.

  6. Add PreStage Panes to display screens to the end user:
    1. Click Add Pane.
    2. In the Add Pane dialog, enter a display name for the pane that will identify it in the list of PreStage Panes.
    3. Choose the type of PreStage Pane you want to add from the Pane Type pop-up menu.
    4. Configure the settings for the PreStage Pane.
      Note:

      • If you are configuring a Text PreStage Pane as the first screen presented to the user in the configuration, the button for navigating back in the enrollment process is not displayed. If the pane is the last screen in the configuration, the button to navigate forward initiates the enrollment process.

      • If you enable Jamf Pro to pass user information to Jamf Connect, you can map the attributes from your Identity Provider to an Account Name and Account Full Name. For example, if your IdP uses "Short Name" for the Account Name, you can type "Short Name" in the Account Name field so when the user enters their username (Account Name) during enrollment, Jamf Connect maps the Account Name to the "Short Name" in the IdP. When configured, these values are automatically sent to computers via a configuration profile during Automated Device Enrollment.

        Values entered in the Account Name and Full Account Name fields must be entered exactly as they appear in your IdP.

    5. Click Apply.
  7. (Optional) Add additional PreStage Panes to the Enrollment Customization configuration as needed.

    You can drag and drop PreStage Panes to change the PreStage pane order. If you added a Single Sign-On Authentication PreStage Pane and a Text PreStage Pane, the transition between each type of pane occurs when the user authenticates in the IdP login screen or uses the navigational buttons.

  8. Click the Branding and Preview tab to customize the enrollment experience and configure the settings on the page.

    Once a change is made, it automatically displays in the preview field.

  9. Click Save .

You can add the configuration to a PreStage enrollment. For more information, see Automated Device Enrollment for Computers.

Note:

You cannot delete an Enrollment Customization configuration if the configuration is included in a PreStage enrollment. To delete the configuration, you must first remove it from the PreStage.