Jamf School Manager - Signing in with Azure Credentials

[2097]

Anyone using this ?

 

I have read through the documentation , and looked through vthe system menus . Is it even possible ?

 

I am coming from Centrify and using profiles from apple profile manager .

 

Can anyone point me in the right direction on howto allow the kids to login with Azure email/password on the mac (OSX) , and i assume i need to import users from azure so i can assign policy to groups.

 

I have already joined the mac in question and assigned a device profile.

 

Many thanks !

[ckedu-local]

I believe you can use Jamf Connect to get this setup, it's 5$ per device for education (unsure if it's p/m or p/y). I've not used it myself but used the alternative in Mosyle which seemed to work as long as the user didn't change their O365 password...

[Brimstone]

macOS does not support Azure login (note: this is logins, not enrolment) you have to buy Jamf Connect for a user to login to a Mac using the Jamf Connect window with their Azure credentials. It's very likely the profiles you are using may also be out of date as Profile Manager was EOL years ago.

[2097]

macOS does not support Azure login (note: this is logins, not enrolment) you have to buy Jamf Connect for a user to login to a Mac using the Jamf Connect window with their Azure credentials. It's very likely the profiles you are using may also be out of date as Profile Manager was EOL years ago.

 

They are just local OSX profiles , But all the macs are being updated and everything wiped anyhow.

 

Just looking for a new way to control them . We have a small suite of around 50 macs

[Brimstone]

They are just local OSX profiles , But all the macs are being updated and everything wiped anyhow.

 

Just looking for a new way to control them . We have a small suite of around 50 macs

Apple's login window still does not support this, in fact Jamf Connect uses local based user accounts.

 

It does not offer profile management for macOS, you would need Jamf Pro or Jamf School for this.

[2097]

Apple's login window still does not support this, in fact Jamf Connect uses local based user accounts.

 

It does not offer profile management for macOS, you would need Jamf Pro or Jamf School for this.

 

Thanks ,

 

Now looking at JAMF connect with Jamf School.

 

Unsure how you can apply user based profiles via JAMF school though , seems it doesnt prepopulate unless you choose a source. Does JAMF connect update JAMF school user list ?

[Brimstone]

Thanks ,

 

Now looking at JAMF connect with Jamf School.

 

Unsure how you can apply user based profiles via JAMF school though , seems it doesnt prepopulate unless you choose a source. Does JAMF connect update JAMF school user list ?

Unless you are asking individuals to enroll with their user name (unlikely) you don't create user based profiles, you create device profiles. You then assign devices to users, to create users you can do this from loads of different sources, ASM, CSV file, LDAP or Enta see below.

 

https://learn.jamf.com/bundle/jamf-school-documentation/page/User_Accounts.html

[2097]

Unless you are asking individuals to enroll with their user name (unlikely) you don't create user based profiles, you create device profiles. You then assign devices to users, to create users you can do this from loads of different sources, ASM, CSV file, LDAP or Enta see below.

 

https://learn.jamf.com/bundle/jamf-school-documentation/page/User_Accounts.html

 

Thanks , so just to verify .

 

Centrify allowed me to have user and device based profiles , i.e. when a staff member logged in they got different icons in their dock than students ( done via a userbased profile )

 

This isnt an option with Jamf ?

[Brimstone]

Apple are deprecating user level profiles in their MDM Framework, having said that it is still possible to to create multiple user computer records in Jamf Pro but not in Jamf School (Jamf School can only really do a limited level of restrictions and app store for macOS) anything more than that requires complex scripting.

 

Bear in mind that it is best practice to always have XML profiles at the local computer level, not in the cloud and the level of management control over user based profiles is limited and it's a very manual process to create them in Jamf Pro.

 

If all you want to do is have users log into any Mac with their individual Enta credentials then Jamf Connect will do this with Jamf School.

[EeboBebo]

Can shared Macs now authenticate users against their Entra ID accounts if the device is in Intune? I read somewhere regarding the SSO plugin but im not sure if that apply to non-Shared devices?

[Brimstone]

Can shared Macs now authenticate users against their Entra ID accounts if the device is in Intune? I read somewhere regarding the SSO plugin but im not sure if that apply to non-Shared devices?

 

macOS does not support this...yet biut it's coming soon.

 

You would need Jamf Connect to allow users to sign in and out of the Macs with their Entra ID's

[NeoNebula]

Yes, you're right that macOS currently does not support authenticating users against their Entra ID accounts directly, especially for shared Macs managed via Intune.But for now, using a solution like Jamf Connect is a viable approach. Jamf Connect can integrate with various identity providers, allowing users to sign in and out of Macs with their credentials. This even includes using Entra IDs for authentication.