

Enter a value in Description, select any option for Expires and choose Add.īefore you leave this page, copy the value for the client secret and record it for later use. Select Certificates & secrets under Manage. You'll need this value in later procedures. On the app Overview page, copy the Application (client) ID value and record it for later use. Select Register to create the application and to open the Overview page for the new app.
#JAMF AZURE AD PRO#

In the Name section, enter a meaningful application name, for example Jamf Conditional Access.On the Register an application page, specify the following details: In the Azure portal, go to Azure Active Directory > App Registrations, and then select New registration. Configure Conditional Access in Jamf Pro.Ĭreate an application in Azure Active Directory.Enable Intune to integrate with Jamf Pro.
#JAMF AZURE AD SOFTWARE#
#JAMF AZURE AD LICENSE#
Microsoft Intune and Microsoft Azure AD Premium P1 licenses (recommended Microsoft Enterprise Mobility + Security license bundle).You need the following to configure Conditional Access with Jamf Pro: The Cloud Connector automates many of the steps that are required when you manually configure integration.Īfter you configure integration, you'll then configure Jamf and Intune to enforce compliance with Conditional Access on devices managed by Jamf. Instead of manually configuring Jamf Pro integration with Intune, we recommend configuring and using the Jamf Cloud Connector with Microsoft Intune. This article can help you manually integrate Jamf Pro with Intune. Devices that are compliant with the Conditional Access policies can gain access to protected company resources. Intune's analysis is combined with intelligence about the device user's Azure AD identity to drive enforcement through Conditional Access. Intune's compliance engine then analyzes the inventory data to generate a report.

When Jamf Pro integrates with Intune, you can sync the inventory data from macOS devices with Intune, through Azure AD. Resource access is controlled by your Azure Active Directory (Azure AD) Conditional Access policies in the same way as for devices managed through Intune. Through integration, you can require that your macOS devices that are managed by Jamf Pro meet your Intune device compliance requirements before those devices are allowed to access your organization's resources. Microsoft Intune supports integrating your Jamf Pro deployment to bring device compliance and Conditional Access policies to your macOS devices. For more information, see the blog post at. If you need help, contact Jamf Customer Success. If you use Jamf Pro’s Conditional Access integration for macOS devices, follow Jamf’s documented guidelines to migrate your devices to Device Compliance integration at Migrating from macOS Conditional Access to macOS Device Compliance – Jamf Pro Documentation. Jamf macOS device support for Conditional Access is being deprecated.īeginning on September 1, 2024, the platform that Jamf Pro’s Conditional Access feature is built on will no longer be supported.
