By using LDAP authentication, you can allow users to log in with their existing Microsoft Active Directory (AD) or Apple Open Directory (OD) credentials.
Integrating with an LDAP directory service allows you to:
Authenticate users with their username and password from AD or OD (available for Jamf Teacher, Jamf Parent, Automated Device Enrollment (formerly DEP), Apple Configurator Enrollment, User Enrollment, and on-device enrollment)
Create users and groups in Jamf School
Update users and groups that already exist in Jamf School (only if the properties in Jamf School do not match the properties in the remote directory)
LDAP authentication cannot read nested groups from AD or OD. In addition, it cannot synchronize your complete AD or OD to Jamf School. (Users and groups are only created or updated when a user tries to authenticate “on the fly”.)