{"id":77356,"date":"2023-06-05T13:09:41","date_gmt":"2023-06-05T17:09:41","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=77356"},"modified":"2023-06-05T13:09:41","modified_gmt":"2023-06-05T17:09:41","slug":"deploy-the-mac-agent-with-jamf-pro","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro","title":{"rendered":"Deploy the Mac Agent with Jamf Pro"},"content":{"rendered":"\n<p>This article describes the recommended method of installing the JumpCloud Agent on macOS devices using Jamf Pro. This method of unattended installation uses an install script provided on JumpCloud&#8217;s GitHub. When properly configured, the script installs the JumpCloud Agent and the JumpCloud Service Account that is required to handle password synchronization.<\/p>\n\n\n\n<p><strong>Prerequisites<\/strong>:&nbsp;<\/p>\n\n\n\n<ul>\n<li>The Privacy Preferences Policy Control (PPPC) profile&nbsp;<strong>must be<\/strong>&nbsp;present on each device on which you intend to deploy the JumpCloud Agent.&nbsp;This will give the agent the permissions required to handle PAM authentication responsibilities.&nbsp;See instructions for installing the PPPC profile in&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/grant-full-disk-access-permissions-to-the-jumpcloud-agent-for-macos#granting-non-jumpcloud\" target=\"_blank\" rel=\"noreferrer noopener\">Granting Permissions for a Non-JumpCloud MDM<\/a>.<\/li>\n\n\n\n<li>You will need the username and password of an Admin account that has a secure token. Use the dscl utility in Terminal&nbsp;to verify the secure token status of an account:\n<ol>\n<li><strong>To find the usernames of user accounts on the device<\/strong>: <kbd>dscl . -list \/Users | grep -v &#8220;^_&#8221;<\/kbd><\/li>\n\n\n\n<li><strong>To check the secure token status of a user, replacing USERNAME with a target username<\/strong>: <kbd>dscl . -read \/Users\/USERNAME AuthenticationAuthority | grep &#8220;SecureToken&#8221; <\/kbd><\/li>\n<\/ol>\n<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><p><strong>Important:<\/strong> The local Admin account must be logged into at least once on each device in order to receive a valid secure token (unless the account was created during initial setup of the device).<\/p><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Installing the Agent and Service Account Using the Install Script<\/h2>\n\n\n\n<p>Follow these steps to install the JumpCloud Agent and Service Account:<\/p>\n\n\n\n<ol>\n<li>Copy the install script.<\/li>\n\n\n\n<li>Paste the script into a text editor and update the undefined parameters.<\/li>\n\n\n\n<li>Upload the install script into Jamf&#8217;s administrator console.<\/li>\n\n\n\n<li>Create and apply a policy to install the agent using the script.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Copying the Install Script<\/h3>\n\n\n\n<ol>\n<li>Copy the install script:&nbsp;<a href=\"https:\/\/github.com\/TheJumpCloud\/support\/blob\/master\/scripts\/macos\/install_agent_and_serviceaccount.sh\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/github.com\/TheJumpCloud\/support\/blob\/master\/scripts\/macos\/install_agent_and_serviceaccount.sh<\/a>.<\/li>\n\n\n\n<li>Paste the contents into a text editor, and make the changes noted in the next step.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Updating the Script<\/h3>\n\n\n\n<p>In a text editor, and make the following changes to the script:<\/p>\n\n\n\n<ol class=\"alpha-list\">\n<li>At the top of the script, note there are three undefined parameters:\n<ol start=\"1\" class=\"is-lower-alpha\">\n<li><strong>CONNECT_KEY<\/strong>,<\/li>\n\n\n\n<li><strong>SECURETOKEN_ADMIN_USERNAME<\/strong>, and<\/li>\n\n\n\n<li><strong>SECURETOKEN_ADMIN_PASSWORD<\/strong>.<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>Replace the&nbsp;<strong>CONNECT_KEY<\/strong>&nbsp;value in the script with the JumpCloud Connect Key.\n<ol start=\"1\" class=\"is-lower-alpha\">\n<li>To find the Connect Key, log in to the JumpCloud Admin Portal and go to&nbsp;<strong>DEVICE MANGEMENT<\/strong>&nbsp;&gt;&nbsp;<strong>Devices<\/strong>.<\/li>\n\n\n\n<li>Click (&nbsp;<strong>+<\/strong>&nbsp;) to add a device.<\/li>\n\n\n\n<li>Scroll to&nbsp;<strong>Connect Key<\/strong>&nbsp;and click&nbsp;<strong>copy<\/strong>.<\/li>\n\n\n\n<li>Paste the Connect Key into the&nbsp;<strong>CONNECT_KEY<\/strong>&nbsp;value field in the script.<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>Replace the&nbsp;<strong>SECURETOKEN_ADMIN_USERNAME<\/strong>&nbsp;and&nbsp;<strong>SECURETOKEN_ADMIN_PASSWORD<\/strong>&nbsp;values with the username and password of a pre-existing local Admin account that has a secure token.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><p><strong>Important:<\/strong> The username and password of this local Admin account must be the same on all your Macs in order for the installation script to function at scale.<\/p><\/div><\/div><\/div>\n\n\n\n<ol start=\"4\">\n<li>After the three required parameters have been filled, set the&nbsp;<strong>SILENT_INSTALL<\/strong>&nbsp;parameter to&nbsp;<strong>0<\/strong>&nbsp;and the&nbsp;<strong>UNATTENDED_INSTALL<\/strong>&nbsp;parameter to&nbsp;<strong>1<\/strong>. This allows the script to run without displaying interactive prompts, and will leverage the parameters defined above to create the JumpCloud Service Account.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><p><strong>Important:<\/strong> The local Admin account must be logged into at least once on each device in order to receive a valid secure token (unless the account was created during initial setup of the device).<\/p><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Uploading the Script<\/h3>\n\n\n\n<p>After the necessary changes have been made to the script in the previous step, upload it to Jamf Pro and create a policy:<\/p>\n\n\n\n<ol>\n<li>In Jamf Pro, upload the configured install script.\n<ol start=\"1\" class=\"is-lower-alpha\">\n<li>See Jamf&#8217;s documentation for&nbsp;<a target=\"_blank\" href=\"https:\/\/docs.jamf.com\/10.38.0\/jamf-pro\/documentation\/Scripts.html?hl=script\" rel=\"noreferrer noopener\">instructions on uploading an install script<\/a>.<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>In Jamf Pro, create a policy with which to associate the script.\n<ol start=\"1\" class=\"is-lower-alpha\">\n<li>See Jamf&#8217;s&nbsp;documentation&nbsp;for&nbsp;<a target=\"_blank\" href=\"https:\/\/docs.jamf.com\/10.38.0\/jamf-pro\/documentation\/Policy_Management.html?hl=policy%2Cmanagement%2Cjamf%2Cpro%2Cdocumentation%2Cjamf\" rel=\"noreferrer noopener\">instructions on creating a policy<\/a>.<\/li>\n\n\n\n<li>Name the policy something similar to \u201cUnattended Jumpcloud Agent Installation.&#8221;<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>In Jamf Pro, apply the policy to a test Mac. Allow some time for the Mac to receive and execute the policy.<\/li>\n\n\n\n<li>Verify the JumpCloud Agent installed successfully on the Mac.&nbsp;The Mac appears in the JumpCloud Admin Portal, and you can proceed to bind a JumpCloud user to the Mac. See&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/bind-users-to-devices\" target=\"_blank\" rel=\"noreferrer noopener\">Bind Users to Devices<\/a>.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>This article describes the recommended method of installing the JumpCloud Agent on macOS devices using Jamf Pro. This method of [&hellip;]<\/p>\n","protected":false},"author":202,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2925,2852],"support_tag":[],"coauthors":[2836,3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Deploy the Mac Agent with Jamf Pro - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how Jamf Pro can be used to install the JumpCloud Agent on macOS devices with a custom install script.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Deploy the Mac Agent with Jamf Pro\" \/>\n<meta property=\"og:description\" content=\"Learn how Jamf Pro can be used to install the JumpCloud Agent on macOS devices with a custom install script.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"denasteward, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro\",\"url\":\"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro\",\"name\":\"Deploy the Mac Agent with Jamf Pro - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:09:41+00:00\",\"dateModified\":\"2023-06-05T17:09:41+00:00\",\"description\":\"Learn how Jamf Pro can be used to install the JumpCloud Agent on macOS devices with a custom install script.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Deploy the Mac Agent with Jamf Pro\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Deploy the Mac Agent with Jamf Pro - JumpCloud","description":"Learn how Jamf Pro can be used to install the JumpCloud Agent on macOS devices with a custom install script.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro","og_locale":"en_US","og_type":"article","og_title":"Deploy the Mac Agent with Jamf Pro","og_description":"Learn how Jamf Pro can be used to install the JumpCloud Agent on macOS devices with a custom install script.","og_url":"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro","og_site_name":"JumpCloud","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"denasteward, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro","url":"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro","name":"Deploy the Mac Agent with Jamf Pro - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:09:41+00:00","dateModified":"2023-06-05T17:09:41+00:00","description":"Learn how Jamf Pro can be used to install the JumpCloud Agent on macOS devices with a custom install script.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/deploy-the-mac-agent-with-jamf-pro#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Deploy the Mac Agent with Jamf Pro"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/77356"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/202"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/77356\/revisions"}],"predecessor-version":[{"id":86568,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/77356\/revisions\/86568"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=77356"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=77356"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=77356"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=77356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}