- In Jamf Connect Configuration, click the + icon at the bottom-left of the window.
- Name your new configuration by clicking on it in the sidebar.
- Click the Identity Provider tab.
- Select "Microsoft Entra ID" in the Identity Provider menu.
- Enter the application ID of the public application you created in Creating an App Registration Using a New API Permission in the OIDC Client ID and ROPG Client ID fields.
- Enter the universally unique identifier (UUID) of the tenant for your Entra ID instance in the Tenant ID field.
- Combine the scope you saved in Creating an App Registration with a Custom API with +openid+profile+email and enter the new scope in the OpenID Connect Scopes field.
The new scope should look similar to the following: api://[RANDOM UUID STRING]/jamfconnect+openid+profile+email
- (Optional) Enter https://127.0.0.1/jamfconnect in the OIDC Redirect URI field.
- Click Test and select OIDC test.
Confirm that your test user was prompted for multifactor authentication before receiving a token.
- For testing purposes, remove the scope created in Step 7.
- Click Test and select ROPG test.
Confirm that your test user receives a success message that reads "Your configuration seems to be working."
- Add the scope from Step 7 back to the OpenID Connect Scopes field.