Jamf Connect
Jamf Connect has been configured and tested for AD account password synchronization to the local Mac account. Below is some key information to know before starting to use Connect. This information will be published on the UFEM Jamf site on August 1, 2025.
- Connect works by having the password hashes of the AD account passwords synchronized to Entra ID.
- An Entra Enterprise Application, Entra role, and Entra security groups enable Jamf site administration by departmental IT units.
- UFIT will need to know the ADM accounts for each IT unit department to be added to an Entra group for site administrators. Please submit tickets for this to End-Point Computing>End-Point Management>Jamf - Mac Platform Management.
Each department will be provided with a Configuration Profile template. The Configuration Profile template allows the department to either use the basic settings or expand on the settings that Connect can provide, such as not demoting the user to a non-administrative user. The Configuration Profile is “linked” to sites and can be scoped to different groups or computers, like GPOs.
- hen users log into a Mac Computer which is in Jamf Connect they will go through the Shibboleth/Duo MFA process.
- Enter the glid@ufl.edu email address at the Microsoft account sign in
-
- The next screen verifies the network (AD) account with the local Mac Computer account.
If the user has just changed their AD account password, they will need to enter the previous local Mac account password at the next login.
-
- Then, go to the Jamf Connect Menu icon inside of the red circle below to force Connect to synchronize the network (AD) password to the local Mac account.
Additional Information for Local IT Support
-
- Jamf Connect 2.45.1 works with macOS 13.x and newer
- You can find the Plist files and the Jamf Connect App at:
- \\ad.ufl.edu\ufem\JAMF\Tools\JamfConnect
- The Plists files used for the Configuration Profiles
- JamfConnect-2.45.1.dmg - The Jamf Connect Configuration App
- JamfConnect.pkg - Jamf Connect app
- \\ad.ufl.edu\ufem\JAMF\Tools\JamfConnect
- All users are being setup as regular/non-administrative accounts using the current template
- Administrators need to login into the device once to create their ADM accounts. This will enable them to do administrative work and/or to perform elevated commands from the regular (local) account.
- The Following Links are the documents to understand how to modify the Configurations for the Menu and Login Plist:
- On Jamf Pro you'll need to locate your Application located under Computers ->Mac Apps->Jamf App Catalog
-
-
- Select New on the top right corner
- On the next page, select Jamf App Catalog and select Next.
- The, on the search bar, look for Jamf Connect and click add.
-