For environments with only 1:1 iPad devices, the configuration of the Seamless Learning Access User ID field in the Jamf Pro source adapter depends on whether your 1:1 users have a Managed Apple Account.
For users without a Managed Apple Account, the field is set directly to email and no advanced editor expression is required. For users with a Managed Apple Account, the field uses an expression that maps to email as the primary identifier with Managed Apple Account fields as a fallback for robustness.
Requirements
Access to your RapidIdentity administrator portal
- Navigate to your RapidIdentity administrator portal.
- From the module selector, choose .
- Click the Jamf Pro source adapter and select Mappings from the top of the page.
- Locate the Seamless Learning Access User ID field.
- Configure the field based on whether your 1:1 users have a Managed Apple Account.
For users without a Managed Apple Account, set the source field to email.
Note:
Email does not carry the same identity assurance as a Managed Apple Account, and Seamless Learning Access sessions created using email as the identifier operate outside the verified identity model. An email address alone cannot confirm that the session corresponds to the intended user of the device. This configuration is appropriate for organizations that do not provision a Managed Apple Account and represents a deliberate exception to the default identity model. If your organization adopts the use of Managed Apple Accounts in the future, this mapping needs to be updated to the expression described below.
For users with a Managed Apple Account, click the Advanced Editor button for the field and replace the existing expression with the following:
when {
email.isNotEmpty() -> email
rostered_managed_apple_id.isNotEmpty() -> rostered_managed_apple_id
else -> managed_apple_id
}
- Save the mapping.
Verify that the mapping is configured correctly. For more information, see Verifying the Mapping in Identity Hub.