{"id":75625,"date":"2023-06-05T13:09:40","date_gmt":"2023-06-05T17:09:40","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=75625"},"modified":"2023-06-06T16:57:29","modified_gmt":"2023-06-06T20:57:29","slug":"implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider","title":{"rendered":"Implement a Zero-Touch MacOS Onboarding Workflow Using JumpCloud and a Non-JumpCloud MDM Provider"},"content":{"rendered":"\n<p>MacOS devices can be enrolled in only one Mobile Device Management (MDM) provider. You can use a non-JumpCloud MDM provider to onboard macOS devices.&nbsp;<\/p>\n\n\n\n<p>If you prefer to use a non-JumpCloud MDM provider, you can create a zero-touch macOS onboarding workflow by pairing the JumpCloud directory with a non-JumpCloud MDM solution:&nbsp;<\/p>\n\n\n\n<ul>\n<li>Zero-touch macOS onboarding workflows that leverage the JumpCloud directory let you&nbsp;fully automate onboarding, set up, and configuration of macOS devices and the user accounts provisioned to these devices.<\/li>\n\n\n\n<li>You can pre-stage settings for onboarding macOS devices within&nbsp;MDM and pre-stage settings and resource access for new users in the JumpCloud directory.<\/li>\n\n\n\n<li>Local device and JumpCloud user accounts can activate during the device onboarding process, which leads to time savings and efficiency gains for IT teams.<\/li>\n\n\n\n<li>For devices running macOS Monterey and later, you\u2019ll need to configure a Privacy Preference Policy Control (PPPC) profile to let JumpCloud apps access certain files used for system administration, and allow access to application data. For more detail on this type of privacy preference, see Apple\u2019s&nbsp;<a target=\"_blank\" href=\"https:\/\/developer.apple.com\/documentation\/devicemanagement\/privacypreferencespolicycontrol\" rel=\"noreferrer noopener\">developer documentation<\/a>.<\/li>\n<\/ul>\n\n\n\n<p>The MDM solution described in this article is not a JumpCloud MDM server. JumpCloud offers an extensible MDM workflow that leverages a custom PKG, which must be created and signed with an Apple Developer account by the JumpCloud admin. This PKG installs the JumpCloud agent after MDM enrollment and provides end users with a tailored onboarding experience. For instructions, see&nbsp;<a href=\"https:\/\/github.com\/TheJumpCloud\/MDM-Prestage-User-Enrollment\/wiki\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud MDM PreStage user enrollment workflow<\/a>.<\/p>\n\n\n\n<p>Before you install the JumpCloud agent on a device running macOS Monterey 12 or newer, you\u2019ll need to install a PPPC profile for JumpCloud. Use the settings described in <strong>Granting permissions for a device that is not enrolled in MDM<\/strong> in&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/grant-full-disk-access-permissions-to-the-jumpcloud-agent-for-macos\" target=\"_blank\" rel=\"noreferrer noopener\">Grant Full Disk Access Permissions to the JumpCloud Agent for MacOS<\/a>.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\"\/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>Consider using JumpCloud\u2019s zero-touch onboarding for a complete end-to-end onboarding solution. If you set up JumpCloud as your MDM server and Apple\u2019s Automated Device Enrollment to enroll your devices, you can create a custom onboarding experience for your users and automatically bind those users to their devices. See&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/add-company-owned-apple-devices-to-mdm-with-device-enrollment\" target=\"_blank\" rel=\"noreferrer noopener\">Add Company-Owned Apple Devices to MDM with Device Enrollment<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>MacOS devices can be enrolled in only one Mobile Device Management (MDM) provider. You can use a non-JumpCloud MDM provider [&hellip;]<\/p>\n","protected":false},"author":203,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2925,2852,2995],"support_tag":[],"coauthors":[2837,3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>MacOS Onboarding with Non-JumpCloud MDM- JumpCloud<\/title>\n<meta name=\"description\" content=\"Understand how you can use a non-JumpCloud MDM provider to implement &quot;zero-touch&quot; onboarding for macOS devices.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Implement a Zero-Touch MacOS Onboarding Workflow Using JumpCloud and a Non-JumpCloud MDM Provider\" \/>\n<meta property=\"og:description\" content=\"Understand how you can use a non-JumpCloud MDM provider to implement &quot;zero-touch&quot; onboarding for macOS devices.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-06T20:57:29+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"derekpietras, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider\",\"url\":\"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider\",\"name\":\"MacOS Onboarding with Non-JumpCloud MDM- JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:09:40+00:00\",\"dateModified\":\"2023-06-06T20:57:29+00:00\",\"description\":\"Understand how you can use a non-JumpCloud MDM provider to implement \\\"zero-touch\\\" onboarding for macOS devices.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Implement a Zero-Touch MacOS Onboarding Workflow Using JumpCloud and a Non-JumpCloud MDM Provider\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"MacOS Onboarding with Non-JumpCloud MDM- JumpCloud","description":"Understand how you can use a non-JumpCloud MDM provider to implement \"zero-touch\" onboarding for macOS devices.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider","og_locale":"en_US","og_type":"article","og_title":"Implement a Zero-Touch MacOS Onboarding Workflow Using JumpCloud and a Non-JumpCloud MDM Provider","og_description":"Understand how you can use a non-JumpCloud MDM provider to implement \"zero-touch\" onboarding for macOS devices.","og_url":"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider","og_site_name":"JumpCloud","article_modified_time":"2023-06-06T20:57:29+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes","Written by":"derekpietras, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider","url":"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider","name":"MacOS Onboarding with Non-JumpCloud MDM- JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:09:40+00:00","dateModified":"2023-06-06T20:57:29+00:00","description":"Understand how you can use a non-JumpCloud MDM provider to implement \"zero-touch\" onboarding for macOS devices.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/implement-a-zero-touch-macos-onboarding-workflow-using-jumpcloud-and-a-non-jumpcloud-mdm-provider#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Implement a Zero-Touch MacOS Onboarding Workflow Using JumpCloud and a Non-JumpCloud MDM Provider"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75625"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/203"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75625\/revisions"}],"predecessor-version":[{"id":89725,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75625\/revisions\/89725"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=75625"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=75625"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=75625"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=75625"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}