To avoid issues with browser redirection during the login process, you can configure the JamfAAD app to use WebView instead.
You can configure JamfAAD to use WebView in the following ways:
Deploy a PLIST file using a configuration profile with the Custom Settings payload configured.
Run a script using a policy with the execution frequency of "Once per user per computer".
The following examples show how to configure the JamfAAD to use WebView instead of a browser redirect.
- PLIST Example (recommended)
-
To configure JamfAAD to use WebView by deploying a PLIST file, use the following example:
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>useWKWebView</key> <true/> </dict> </plist>When configuring the Custom Settings payload, enter the following in the Preference Domain field: com.jamf.management.jamfAAD
- Script Example
- To configure the JamfAAD to use WebView for users signing into Microsoft Entra ID, deploy a policy to managed computers that runs the following script:
#!/bin/sh defaults write com.jamf.management.jamfAAD useWKWebView -bool trueNote:The above command must be executed before the JamfAAD initiates the registration process.