Jamf Device Manager

Jamf is a MDM (mobile device management) for macOS, iOS and Apple TV. Jamf automates repetitive management tasks and boosts security by eliminating human error. It provides a complete management and security solution for an Apple-first environment that is enterprise secure, consumer simple and protects personal privacy.  For detailed information, please refer to the Jamf’s official documentation.

Integration Method: API

Tables: Device Inventory Info (5001)

This integration supports the following events.

This integration supports the following versions.

Prerequisites

• The user should have access to the Jamf Pro portal.

• The user should have access to DataBee console.

Configuration Overview

1. Create an API Role and API Client from Jamf Pro platform, to generate Client ID and Client Secret.

2. Add the Jamf Device Manager in the DataBee console with the below parameters.

   DataBee Parameter	Jamf Device Manager Parameter
   API Base URL (<hostname>)	Hostname
   Token URL (<hostname>)	Hostname
   Key Id	Client ID
   Secret Key	Client Secret

Jamf Device Manager Configuration

Create an API Role

1. Sign in to the Jamf Pro platform. Store this hostname for later use while configuring DataBee data source.
    

2. Navigate to Settings in the sidebar.

   
   

3. In the System section, click API Roles and Clients. 
    

4. Click the API Roles tab at the top of the pane. Then click on New. 
    

5. Enter the following API role details:

   1. Enter a ‘Display Name’ for the API role. 

   2. In the role privileges field, add privilege Read Mobile Devices and Read Computers from the pop-up menu. 
       

6. Click on Save.

Create an API Client

1. Sign in to the Jamf Pro platform. Copy and store this hostname for later user.
    

2. Navigate to Settings in the sidebar.
    

3. In the System section, click API Roles and Clients. 
    

4. Click the APl Clients tab at the top of the pane.  Then click on New.
    

5. Enter the following API Client details:

   1. In the API Roles field, select the role created in previous step.

   2. Keep Access Token Lifetime as 3600. 

   3. Click on Enable API Client.
       

6. Click Save. 

7. Click on Generate client secret.
   
   

8. Click on Create secret.
    

9. Click on Copy client credentials to clipboard. It will copy the generated Client ID and Client Secret.

   

   Note:

   Store the copied credentials in a secure place as the Client Secret will not not be revealed again.

DataBee Configuration

To configure the data source,

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
   
   

2. Search for the Jamf Device Manager and click it as shown below.
    

3. Click on the API Ingest option for collection method.
    

4. Enter feed contact information and click Next.
    

5. In the configuration page, confirm the following:

   • API Base URL: this is the base URL that DataBee will interact with. Replace the <hostname> placeholder with hostname of your Jamf Pro platform.

   • Authorization Method: Token URL Auth.

   • Token URL: this is the Authentication URL that DataBee will interact with to get access token. Replace the <hostname> placeholder with your hostname.

   • Secret Key: enter the above generated Client Secret from Jamf Pro platform.

   • Key ID: enter above generated Client ID from Jamf Pro platform.

   • Event Types: preselected for all the event types that integration pulls.

     

6. Click Submit.

Troubleshooting Tips

• Since you cannot view the Client Secret after the 1^st time, navigate to created API Client and click on Rotate client secret. It will again display the Client ID and Client secrete, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.

• Ensure that Read Mobile Devices and Computer Devices permissions are provided for Device Manager.