Skip to main content

Requirements for connecting Jamf Pro to Okta over SSO

  • Updated

Introduction

It is possible to link your datajar.mobi / Jamf Service Provider Plan to your Okta instance using SAML/SSO. This allows SSO user authentication during enrolment using Enrolment Customisation (macOS 10.15+) and the Self Service app, as well as assignment of devices and integrations into Apple School/Business Manager.

Using SSO during enrolment optionally allows you to require your users to use MFA when they authenticate, before Macs are enrolled, if using Enrolment Customisation.

Requirements / Dependancies

An LDAP/S connection to Okta Universal LDAP is required to work along side the SSO integration to give richer inventory reporting via the collection of additional attributes in Okta user records which can be used for app/profile scoping. Please ensure the steps in the following article are completed beforehand: Configuring Okta Universal Directory (LDAPS) for datajar.mobi

Technical Details

  1. Follow the steps in the following article (we recommend using the Pre-Configured Application): 
    1. https://docs.jamf.com/technical-articles/Configuring_Single_Sign-On_with_Okta.html
    2. A dataJAR engineer will provide you with the "Jamf Pro" URL. It may be in the format of customername.datajar.mobi and NOT customer.jamfcloud.com - please do not use *.jamfcloud.com in any field when configuring the Okta app.
  2. Edit the Application as follows:
    1. Under Sign On → Settings → Credential Details, set the Application username format to mailNickName (this attribute should be created as part of Configuring Okta Universal Directory (LDAPS) for datajar.mobi)
  3. Please provide the Metadata URL from Okta to the dataJAR engineer.
  4. If you wish to follow the optional steps to enable Single Logout, please let your engineer know and they will provide the necessary certificate for you to upload to your Okta instance.

Need further support?

Automate. Simplify. Succeed. If you still require assistance with us or have any further questions, please raise a ticket with our support team.

Alternatively, please see our frequently updated knowledge base articles for reference.

Related articles