Entering Jamf Pro Settings

With App Portal, you can deliver a universal enterprise app store that includes both Windows and OS X desktop applications. You can connect App Portal to a Jamf Pro server and create catalog items for OS X desktop applications. This gives you license compliance, deployment automation, and control.

Note:To deploy Apple iOS mobile apps, you need to connect to an Workspace ONE UEM server, as described in Entering Workspace ONE UEM Settings.

Important:App Portal supports Jamf Pro 10.36.1, On Premises version. Jamf Pro on the Cloud is not officially supported. However, you may attempt to integrate with Jamf Pro on the Cloud using API calls. For more information, see API Calls Used by App Portal to Integrate with Jamf Pro.

Note:In order for App Portal to be successfully integrated with Jamf Pro, your Jamf Pro account needs to have a specific set of minimum permissions. For more information, see Required Jamf Pro Account Permissions.

Note:For information on the API calls used by App Portal when integrating with Jamf Pro, see API Calls Used by App Portal to Integrate with Jamf Pro.

To connect App Portal to a Jamf Pro server, you need to enter settings on the Jamf Pro tab of the Site Management > Settings > Deployment view.

Entering Jamf Pro Server Details
Entering Jamf Pro XPath Mapping Settings
Entering Jamf Pro Machine Name Configuration Additional Properties

Entering Jamf Pro Server Details

In addition to entering the Jamf Pro server connection details, you also need to enter Jamf Pro policy information. Jamf Pro policies allow you to remotely perform common management tasks on managed computers. For example, you can run scripts, manage accounts, and distribute software using a policy. For App Portal to create a policy and a static group, it needs a template for each of these.

To enter Jamf Pro server details, perform the following steps:

To enter Jamf Pro server details:

1. Open the Site Management > Settings > Deployment view.
2. Open the Jamf Pro tab. The Jamf Pro Server Details are listed.
3. In the Jamf Pro URL field, enter the URL to your Jamf Pro server.

Note:App Portal and Jamf Pro communicate using Jamf Pro's JSS API. By default, Jamf Pro uses port 8443 for inbound SSL traffic to the JSS. You will need to include the port number in the Jamf Pro URL when configuring your settings. If you have modified the inbound SSL port within your JSS configuration, specify your custom port number in the Jamf Pro URL.

4. Enter the User Name and Password to your JamfJamf Pro server.
5. In the App Portal Policy folder field, enter the folder/category in Jamf Pro under which the policies created by App Portal will reside.
6. In the Policy template name field, enter the name of the policy in Jamf Pro which can be used as a template.
7. In the Computer group template name filed, enter the name of the static group in Jamf Pro which can be used as a template.
8. In the Authentication Type drop-down field, Bearer Token option will be selected by default. Depending on the authentication type you are using, either keep Bearer Token selected or click Basic to use Basic Authentication.
9. Click Test to test connection settings. If successful, the following message is displayed:

Jamf Pro Server settings are valid.

Note:Jamf Pro users (which are based upon an email address) and are synced to App Portal at the same time that the System Center Configuration Manager / Altiris users and are synced. App Portal users are matched with System Center Configuration Manager / Altiris users by having the same email address.

Entering Jamf Pro XPath Mapping Settings

The Jamf Pro XPath Mapping area of the Jamf Pro tab provides a means for you to adapt to changes to the Jamf Pro APIs that may occur in future releases of Jamf Pro.

App Portal uses these XPaths to access values from the API results sent from Jamf Pro. If any of these change in the Jamf Pro API in the future, you can make the corresponding necessary changes here.

There is no need to modify these XPath mapping settings. But, If, at some future time Jamf Pro changes their XPath mapping settings to something different, you can update these values by performing the following steps.

To enter Jamf Pro XPath status mapping settings:

1. Open the Site Management > Settings > Deployment view.
2. Open the Jamf Pro tab. The Jamf Pro XPath Mapping settings are listed.
3. Make any edits, as required.
4. Click Save.

Entering Jamf Pro Machine Name Configuration Additional Properties

The Jamf Pro Machine Name Configuration area of the Jamf Pro tab provides a means for you to change user computer mappings that App Portal utilizes for Jamf Pro. By default, App Portal maps to Jamf Pro using email addresses. Changing the mapping lets you map to Jamf Pro with UserName Or FullName Or DisplayName. In some environments, the user name has a unique ID which helps uniquely identify each user. If you enter additional properties in the Jamf Pro Machine Name Configuration section and a sync is performed, the Macintosh machine name will get appended with the additional properties and the entire string will be treated as a machine name. For example:

If the Macinstoch machine name is MacABC and you have configured an additional property as mac_address then the machine name will be the entire string: MacABC; 0C:4D:E9:CD:EC:C4.
If you have configured the additional property as serial_number,udid then the machine name will look similar to the following:
MacABC; C07NG0W4DWYL; AEB468FF-904B-5D76-8167-392761E942CD.

To enter additional properties for Jamf Pro machine name configuration:

1. Open the Site Management > Settings > Deployment view.
2. Open the Jamf Pro tab. The Jamf Pro Machine Name Configuration are listed.
3. In the Additional properties for device sync field, enter information in the following format:

serial_number,mac_address,udid

When the above details are configured and a sync is performed, then the Macintosh machine name will get appended with the additional properties and the entire string will be treated as a machine name.

Note:When checking out Jamf Pro catalog items, the mapping to Jamf Pro must be considered when specifying the machine name. Consider the following steps:

a. Select the Enable request to manual list? option for a Jamf Pro catalog item.
b. On the resulting Choose Target panel of the Checkout view (available for requesters who have been assigned the Request to Manual list), select the Add machine names or user IDs manually option.
c. On the Checkout screen where you Enter Target /Users, enter the Macintosh name in the format that corresponds to the currently configured mapping to Jamf Pro. When additional properties are specified in the Additional properties for device sync field of the Jamf Pro Machine Name Configuration section (in the Jamf Pro tab of the Site Management > Settings > Deployment view), then the machine name must be entered as the entire string in a format such as MacABC; 0C:4D:E9:CD:EC:C4 or MacABC; C07NG0W4DWYL; AEB468FF-904B-5D76-8167-392761E942CD depending on the additional properties you specified.

See Also