Configuring SAML Attributes from Okta

Jamf Trusted Access Solution Guide for Business
Solution
Application
Content Type
Technical Documentation
Solution Guide
Utilities & Services
ft:locale
en-US

Requirements

You must create an app integration for Jamf Pro in Okta.

For more information, see the Configuring Single Sign-On with Okta article.

  1. In Okta, click Applications.
  2. Navigate to your Jamf Pro SAML application that is used for SSO.
  3. Click the Sign-On tab.
  4. Click Edit.
  5. Click Add Another.
  6. Add new attribute statements that match the account name and account full name values needed for an enrollment customization. Consider the following examples:
    Attribute NameValueDescription
    RealNameuser.displayNameThis custom attribute value passes a user's first and last name and can be mapped to a user's macOS local account full name.
    <saml2:Attribute Name="RealName"
                     NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
        <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                              xsi:type="xs:string">Samantha Johnson</saml2:AttributeValue>
      </saml2:Attribute>
    UserShortNameuser.nickNameThis custom attribute value passes a user's Okta nickname, which is commonly formatted as "firstname.lastname". This attribute can be mapped to a user's macOS local account name.
    <saml2:Attribute Name="UserShortName"
                       NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
        <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema"
                              xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                              xsi:type="xs:string">samantha.johnson</saml2:AttributeValue>
      </saml2:Attribute>
  7. Click Save.

Your SAML tokens now include the required values to configure the Account Name and Account Full Name fields of an enrollment customization in Jamf Pro.

For confirmation, use a SAML decoder to examine the contents of a SAML token for user claims.