To establish a secure and effective login environment for users, the Jamf Connect Login Window is customizable with scripts and preferences to suit your organization's needs.
Jamf Connect can enforce multifactor authentication (MFA) using your cloud identity provider (IdP). Depending on your IdP and the type of authentication used, Jamf Connect will handle MFA in one of the following ways:
- OpenID Connect —
Jamf Connect will indirectly display any MFA challenges within a web view. The entire MFA experience is configured within your IdP's settings.
- Okta Authentication API —
Jamf Connect presents Okta MFA challenges within the Jamf Connect UI. Some additional messaging can be customized via Jamf Connect settings to help users complete an MFA challenge.
Passthrough authentication with Jamf Connect simplifies the login progress for web-based identity providers that use OpenID Connect. By adding the Use Passthrough Authentication (OIDCUsePassthroughAuth) setting to your Jamf Connect configuration, logins can use the user's web credentials seamlessly to start the user session.
You can configure Jamf Connect to manage when users can complete network or local authentication to log in to computers. The Require Network Authentication (DenyLocal) setting forces users to log in with the cloud identity provider. This improves the security of automatic FileVault passthrough logins, which use only basic authentication to start a user's session. When enabled, the Local Login button is hidden from the login window. This setting is usually used alongside the Allow Local Fallback (LocalFallback) setting, which only allows users to use local authentication if a network connection is unavailable. Together, these settings ensure the following:
Computers are secured via network authentication.
Users are not locked out of their computers if a network connection is unavailable.
The Jamf Connect Login Window configuration is customized to suit your organization's needs.
The configuration is now available to automatically deploy to enrolled computers with Jamf Connect via Jamf Pro. For more information, see Automatically Deploy and Update Jamf Connect Using Jamf Pro.