If Directory Services is also integrated with Jamf Pro, keep the following in mind when configuring SSO:
If using Directory Service users or groups for SSO, they should first be added as standard Jamf Pro users or groups in the Jamf Pro User Accounts and Groups settings.
If Directory Service is integrated with Jamf Pro, Directory Service limitations and exclusions can be used. They will be calculated by matching the username entered into the IdP during Self Service user login with the username from the integrated Directory Service.
If Directory Service is not integrated with Jamf Pro, targets and exclusions for a username will be calculated by matching the username entered into the IdP during Self Service user login with Jamf Pro user accounts and groups.