Jamf Parent - Sign In's

[Tefters]

Afternoon all,

 

Any Jamf admins on here have the parent app setup in their organisation settings that work with parent sign-in's, NOT QR code.

 

Jamf' documentation is lacking in this area and what I have been able to find is very basic but also fruitless.

 

I have enabled Jamf Parent in the Organisation settings, ticked the usual self explanatory boxes and setup the time for all day at present just for me to test with.

I have then created a user group called "parents" and further created a test parent user and assigned it to this group and attached a test child I have setup to the parent. The group "parents" also has the Allow Jamf Parent status set.

 

I then download the parent app on my phone, pop the Jamf domain name in along with the username and password of my test parent and I just keep getting an error stating "contact your IT support admin", useful

 

If I enable the "allow QR code option" and then scan that through the app everything works fine but I don't want this as students could potentially mess around with other students iPads so logins are the sorted method.

 

Anyone actually got this working, cant see that I am missing anything but clueless as to why it doesn't work with a sign-in.

[RLR]

Are you using Jamf School or Jamf Pro?

 

We have it setup in Jamf Pro to use the QR code. I believe parent logins only work with Jamf School although I'm not familiar with how to set them up.

[Brimstone]

Jamf Parent does not work with Jamf Pro, here are the clear instructions on setting this up for Jamf School.

 

https://learn.jamf.com/en-US/bundle/jamf-school-documentation/page/Jamf_Parent_Integration_with_Jamf_School.html

[Tefters]

Yup I am Jamf School and I have followed that guide linked by Brimstone.

 

Screenshots attached of config for reference.

 

Edited May 16, 2024 by Tefters

[Brimstone]

Yup I am Jamf School and I have followed that guide linked by Brimstone.

 

Screenshots attached of config for reference.

 

[ATTACH=CONFIG]71549[/ATTACH][ATTACH=CONFIG]71550[/ATTACH][ATTACH=CONFIG]71551[/ATTACH][ATTACH=CONFIG]71553[/ATTACH]

 

I assume your Jamf School instance is publicily facing with FQDN?

[Tefters]

I assume your Jamf School instance is publicily facing with FQDN?

Jamf is hosted by themselves so I would presume so, yes? It's not something I host internally in a DMZ facing the net and I have never seen any details to say otherwise.

 

The instance name of https://theradcliffeschool.jamfcloud.com is publicly accessible on the net.

 

There is one thing that has just gone through my mind after 2 tequilas on the way to bed and that is I have Azure setup against the tenant so I wonder if that's got something to do with it. All my users are synced from ASM and the logons are done via Azure and email so I am wondering if because I am setting these test logons up against external addresses that its failing the logon because it's passing through to Azure therefore failing as the SAM account doesn't exist in Azure.

 

I can test this theory tomorrow by creating some test parent accounts in Azure and match the email addresses on test parent accounts in Jamf.

Edited May 20, 2024 by Tefters

[Brimstone]

Jamf is hosted by themselves so I would presume so, yes? It's not something I host internally in a DMZ facing the net and I have never seen any details to say otherwise.

 

The instance name of https://theradcliffeschool.jamfcloud.com is publicly accessible on the net.

 

There is one thing that has just gone through my mind after 2 tequilas on the way to bed and that is I have Azure setup against the tenant so I wonder if that's got something to do with it. All my users are synced from ASM and the logons are done via Azure and email so I am wondering if because I am setting these test logons up against external addresses that its failing the logon because it's passing through to Azure therefore failing as the SAM account doesn't exist in Azure.

 

I can test this theory tomorrow by creating some test parent accounts in Azure and match the email addresses on test parent accounts in Jamf.

Yes I would expect Jamf to not recognise any account if that is the case