Adding a New Application for Jamf Pro in an On-Premise Environment

Technical Articles
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
  1. Log in to OneLogin as a user with administrator privileges and navigate to Apps > Add Apps.
  2. Search for "SAML" and select SAML Test Connector (IdP) w/ NameID (Unspec).
  3. In the Configuration pane, enter a display name for the application, and click Save.
  4. Navigate to the Configuration tab to configure application settings.
    • RelayState defines where users get redirected after a successful login.
      Example:https://instancename.jamfcloud.com
    • Audience should match the Entity ID field in Jamf Pro.
      Example: https://instancename.jamfcloud.com/saml/metadata

    • Recipient should match the following format: https://instancename.jamfcloud.com/saml/SSO

    • ASC (Consumer) URL Validator is the same as Recipient but with escaped HTML characters. Use the following format:

      starts with ^
      ends with $
      every dot ( . ) and slash ( / ) must be prepended with a backslash ( \ )

      Example:

      ^https:\/\/instancename\.jamfcloud\.com\/saml\/SSO$

    • ASC (Consumer) URL should match the following format: https://instancename.jamfcloud.com/saml/SSO

    • (Optional) If using Single Logout, the Single Logout URL should match the following format: https://instancename.jamfcloud.com/saml/SingleLogout.

  5. Click the Parameters tab.
  6. Edit the NameID (fka Email) parameter. It is used to map access rights in Jamf Pro.

    • If you are mapping users in Jamf Pro by "Email", use the default Email value.

    • If you are mapping users in Jamf Pro by "Username", select the Username value.

    For more information about macros for parameters, see the following OneLogin documentation.

  7. Add a new parameter for Groups. Note that it is possible to change the name of the SAML attribute which will be used by Jamf Pro to retrieve group information (Group Mapping).
    1. In the Name field, enter http://schemas.xmlsoap.org/claims/Group.
    2. Select the Include in SAML assertion checkbox.
    3. In the Value field, select MemberOf.
  8. Save the configuration.
  9. Use the Rules, SSO, Access, Users, and Privileges tabs to specify your settings for the Jamf Pro application.
    Note:

    Ensure you assign users or groups to the newly created application for Jamf Pro.

  10. Save the configuration.