SaaS Management: Jamf Connector

JumpCloud® SaaS Management gives you visibility and control over shadow IT and SaaS app use within your org. Connectors detect shadow IT without adoption of a browser extension and provide a significant increase to the valuable usage and security insights.

The Jamf Connector retrieves the license list from the Jamf API. Using periodic polling for regular updates, it captures new users to keep data accurate and up-to-date.

Prerequisites

• You must have administrative access to Jamf to create API roles and clients.

Considerations

• Based on your organization’s size, the initial collection of data may take some time, up to an hour. 

Configuring Jamf

1. Log in to Jamf using your customized tenant URL. For example, yourtenant.jamfcloud.com.
2. Go to Settings > API roles and clients.
3. In the API Roles tab, create a new role.
4. Search for and add the Read User privilege.
5. Go to the API Clients tab and create a new client:
   1. Enter a display name.
   2. Select your new role from the API roles dropdown menu.
   3. Click Enable API Client and Save.

Configuring JumpCloud

1. Log in to the JumpCloud Admin Portal.
2. Go to SECURITY MANAGEMENT > SaaS Management.
3. In SaaS Management settings, go to the Connector tab and select + Add Connector.
   

4. Select Jamf and click Connect. 
5. Enter a name and click Connect.
6. Enter the following fields copied from Jamf during configuration in the previous section:
   1. Client ID
   2. Client Secret
   3. Jamf Tenant
7. Click Save Connector.
8. You will now see Jamf in your list of Connectors.

Required Permissions

• Read Users:
  • View users and their email addresses.
  • Get users to populate SaaS Management accounts.

Uninstall/Remove

• On the Connector’s detail page, click on Delete Connector and follow the prompts.

• To revoke the permissions granted to JumpCloud, delete the API Role and API Client created in Jamf.