Deploying Jamf Connect to your site

Jamf Connect has been moved into the Jamf Pro production server for any site who would like to use it. As Jamf Connect is new to the University of Texas at Austin, we highly recommend testing with your own environment at a small scale, before deploying to your entire Mac fleet.

In the production Jamf Pro server, you will find three different configurations profiles related to Jamf Connect. Two of these are intended to copied into new configuration profiles within your own site to allow site admins to modify or scope as they see fit. The third configuration profile is related to our license agreement with Jamf, and will be deployed globally. This does not need to be duplicated, or scoped by sites.

• This step will need to be completed while in the "Full Jamf Pro" view

The two configuration profiles you will need are:

GLOBAL - TEMPLATE - JAMF Connect Login

GLOBAL - TEMPLATE- Jamf Connect App

*note- As shown in the photo, the quickest way to find these payloads is by navigating to the configuration profile section, and using the build in search bar to narrow the view to "connect"

At this time, Site admins may not have permission sets to easily clone a global configuration profile. Please reach out to the EPM team via a Service now ticket, or direct message. One of the EPM team members will clone the Configuration Profile into your site.

• Complete these next steps within your own site view! - This will allow the next steps to look cleaner, and ensure we do not impact other Jamf Connect users 

After the configuration profiles have been copied to your site, one more step is needed to send the Jamf Connect application to the machines. 

Navigate to the Jamf Pro setting page. Next find the "Jamf Connect" section within the "Jamf Application" submenu.

You will see your new Jamf Connect configuration profiles from above. If you select "Edit" from the left column you will be able to deploy the Jamf Connect software automatically. This will follow the same scope you have set within the Configuration Profile

Only one of the configuration profiles needs to have the software set to deploy, however there should be no conflicts if both are set

IMPORTANT - If your site is using a local admin account for IT staff, you will also need to update the Jamf Connect Login window settings to ensure it cannot be selected by end users during account migration.

To update the Jamf Connect login window settings after a configuration profile has been copied into your site you navigate into "YOURSITE - JAMF Connect Login → Application & Custom settings → Edit (in bottom right corner)

Find the section of the plist that refers to "MigrateUsersHide". Update the names below this part to reflect your sites IT admin accounts. 

For what your users will see on their machine please see: Jamf Endpoint Client Settings

related: Lock Screen settings to allow user switching