Mapping in Environments with Shared iPad Devices and 1:1 iPad Devices

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

For environments with both Shared iPad devices and 1:1 iPad devices, the Seamless Learning Access User ID field requires a conditional expression. The expression detects whether a given user is a Shared iPad student or a 1:1 student or staff member, and applies the appropriate identity resolution for each.

In many K-12 environments, Jamf Pro users rostered through Apple School Manager have the grade field populated, while staff and 1:1 students managed outside Apple School Manager have grade empty. The grade field is a useful, but not universal, proxy for Shared iPad users.

Important:

This logic assumes grade is populated only for Shared iPad students in your environment. If your organization populates grade for all students regardless of device model (for example, via a full Apple School Manager roster sync that covers both shared and 1:1 users), this expression routes 1:1 students through the Shared iPad branch incorrectly. Verify field population patterns across a sample of your user records before deploying.

Requirements

Access to your RapidIdentity administrator portal

  1. Navigate to your RapidIdentity administrator portal.
  2. From the module selector, choose "Identity Hub".
  3. Click the Jamf Pro source adapter and select Mappings from the top of the page.
  4. Locate the Seamless Learning Access User ID field.
  5. Click the Advanced Editor button for the field.
  6. Replace the existing expression with the following:
    when {
    grade.isNotEmpty() -> when {
        rostered_managed_apple_id.isNotEmpty() -> rostered_managed_apple_id
        else -> managed_apple_id
    }
    else -> when {
        email.isNotEmpty() -> email
        rostered_managed_apple_id.isNotEmpty() -> rostered_managed_apple_id
        else -> managed_apple_id
    }
}

    The expression resolves the Seamless Learning Access User ID as follows:

    grade is populated (Shared iPad student)
    Uses rostered_managed_apple_id, falling back to managed_apple_id.
    grade is empty (staff or 1:1 student)
    Uses email, falling back to rostered_managed_apple_id, and then managed_apple_id.
    Note:

    If your 1:1 users do not have a Managed Apple Account, the else branch naturally resolves to email for those users since both Managed Apple Account fields are empty. The 1:1 branch of this expression operates outside the verified identity model when email is used as the identifier.

  7. Save the mapping.

Verify that the mapping is configured correctly. For more information, see Verifying the Mapping in Identity Hub.