![]() Nesting groups in directory services is a common administrative management task. This effectively means a user no longer needs to be a direct member of a group scoped to an app, configuration profile or policy, but can instead be a member of a subgroup embedded in the scoped group. Jamf Pro 10.33 enhances group lookups by adding Transitive membership lookups. Jamf Pro 10.19 introduced Azure Single Sign-On integration and later in Jamf Pro 10.27 added the ability to integrate with Azure for user/groups lookups, authentication and scoping. It keeps data separate by associating a Personal Apple ID with personal data and a Managed Apple ID with corporate data. The Account-driven user enrollment workflow removes a major barrier to BYO enrollment: separating personal and corporate data. This workflow mitigates the process to manually go into Safari and type in the authentication URL, easing the user experience while also eliminating potential security risks by clicking on an enrollment URL link. Once a user types in their directory username and password, they are asked to Allow Remote Management, which downloads the MDM profile to the device. Settings App > General > VPN & Device Management > enter Managed Apple ID > Continue. Here is the specific workflow for the user on their iOS/iPadOS device: ![]() In this new workflow, when a user enrolls their personal device, they no longer need to find their organization's enrollment URL to start the process and instead use a method that is consumer-simple and familiar to how other accounts are added within the Settings app on the device. ![]() Account-driven User EnrollmentĪt WWDC, this year, Apple announced a new method for BYOD for iOS and iPadOS devices that streamlines the user enrollment onboarding process and focuses on providing corporate access to BYO users while maintaining user privacy on their personal device. The latest version of Jamf Pro (10.33) includes Account-driven user enrollment, updates to the Azure AD integration, enhancements to Recovery Lock, the ability to search for software titles in Title Editor, and more.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |