Verify the certificate listed is the correct certificate for your Jamf. On the bottom of the page in Jamf Pro Settings Single Sign-On, modify the Single Sign-On Options for Jamf Pro under the section Enable Single Sign-On for User-Initiated Enrollment. For a list of trusted root certificates on iOS devices, see Available trusted root certificates for Apple operating systems from Apple's support website.įor more information about defining the Jamf Pro enrollment information in a JSON file and hosting it on a web server, see Account-Driven User Enrollment for Personally Owned Mobile Devices in the Jamf Pro Documentation. After installing the CA certificate during user-initiated enrollment, but before installing the MDM profile, your end users must manually trust your servers SSL certificate by doing the following: On the device, go to Settings > General > About > Certificate Trust Settings. To allow users to use SSO credentials, you must integrate a third-party Identity. User groups you want to target for macOS enrollment with Jamf. Under the General section, click Choose File to upload the. user.In Jamf Pro, click Computers at the top of the sidebar. The user is prompted to enter credentials for an LDAP directory account, single sign-on (SSO) credentials, or Jamf Pro user account with user-initiated enrollment privileges, and then they must click Log in. In the Jamf Pro Portal, go to Settings > Computer Management > Packages. The SSL certificate for the web server must be issued by a trusted certificate authority. Enrollment Experience for macOS 10.12.6 or Earlier. The JSON file must be hosted on a server which supports HTTPS GET requests.
The web server must have the same fully qualified domain name ( FQDN) as the verified domain that the Managed Apple IDs belong to, and web services must be enabled. Jamf’s purpose is to simplify work by helping organizations manage and secure an Apple experience that end users love and organizations trust. For more information, see the Verify domains in Apple Business Manager and Apple School Manager from Apple's support website Enrollment Requirementsīefore you can allow users to enroll personally owned mobile devices via User Enrollment, you must define the Jamf Pro enrollment information in a JSON file and host it on a web server that is accessible to any device you want enrolled with Jamf Pro. For Account Driven User Enrollment, Managed Apple IDs must belong to a verified domain. Retrieve the Jamf Pro Device Enrollment public key get Get all instance sync states for all Device Enrollment Instances get Create a Device Enrollment Instance with the supplied Token post.
0 kommentar(er)
