Device Compliance for Shared Devices

Microsoft's Shared Device Mode (SDM) is a feature in Microsoft Entra ID that allows a device to be shared among multiple users. Jamf Pro supports shared devices as a device compliance platform type.

Note:

Device compliance for shared devices is not yet supported for Jamf Premium Cloud Plus.

To use device compliance for shared devices, the following requirements must be met:

The Cloud Services connection must be enabled. For more information, see Enabling the Cloud Services Connection in the Jamf Pro Documentation.
Jamf Setup and Jamf Reset must be configured for Shared Device Mode and deployed to end user devices. For more information, see the Jamf Setup and Reset Configuration Guide.
Microsoft Authenticator must be deployed to end user devices.

To configure device compliance for shared devices in Jamf Pro, navigate to Settings > Global > Device Compliance and select Shared Devices (iOS and iPadOS) as a platform type, then select an Applicable Group and Compliance Group. The Applicable Group should not include devices that are included in a different Applicable Group for standard iOS compliance.

After enabling device compliance for shared devices in Jamf Pro, you must configure an Intune partner. The Entra ID Group used for policy scoping should have devices instead of users.

Important:When a device is registered using device compliance for shared devices, the Microsoft Authenticator app on the device enters Shared Device Mode. If shared device compliance is disabled, the device must be erased for the device to register with device compliance again, or to disable SDM. For more information on erasing a device, see Erase Apple devices from the Apple Support website.

For more information, see Configuring the Microsoft Entra Integration with Jamf Pro in the Device Compliance with Microsoft Entra and Jamf Pro technical paper.