Disabling the Microsoft Entra Integration

Technical Paper: Device Compliance with Microsoft Entra and Jamf Pro
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
If you decide that you no longer want computers or mobile devices to have access to company resources, you can disable the Microsoft Entra integration in Jamf Pro.
Note:

When you disable the integration, there is a short window of time where computers and mobile devices can still access company resources.

  1. Create an empty smart group to calculate device compliance. For more information, see Smart Groups in the Jamf Pro Documentation.
  2. Add a criteria that no computer or mobile device in your environment will meet to ensure your smart group's membership remains empty. For example "iOS version is 1000", or "operating system is 1000".
  3. Navigate to Settings > Global > Device compliance and select the group from the Compliance Group pop-up menu.
    Computers and mobile devices cannot access company resources after they are no longer marked as "Compliant" in Entra ID.
    Note:

    In large environments, this process may take a while.

  4. Toggle the Configuration status switch off.

You can also block devices from accessing company resources using a Conditional Access policy. For information, see the "Block access" section on the following webpage from Microsoft: Conditional Access: Grant.