In the Azure portal, navigate to the Intune blade -> Device Compliance -> Partner device management.Ģ. Pick an account and enter your password.Ĭonfiguring Microsoft Intune to allow Jamf Pro integrationġ. Select Enable Microsoft Intune Integration.Ĥ. Log onto the Jamf admin console, click on the gear icon in the upper right-hand corner, then under Global Management select Microsoft Intune Integration and click Edit.Ģ. NOTE Jamf documentation on configuring Microsoft’s Intune Integration settings in Jamf Pro can be found here.ġ. Configuring Microsoft Intune Integration settings in Jamf Pro Put in the application ID for the enterprise app that was just created and click Save. NOTE You won't be able to see it again once you leave so make a safe copy of it.ġ7. Select the Intune service from the far left of. Select ' New client secret'.ġ5. Enter a Description (EX: JSS Key) and select an expiration date. Under Grant consent, click on “ Grant admin consent for ”ġ3. Click Yes on the “ Do you want to grant consent for the requested permissions for all accounts in ?”ġ4. Select the Certificates & secrets blade. Check the box for update_device_attributes (send device attributes to Microsoft Intune). Once gone, the API itself will disappear from the menu.ġ1. Click on the permission itself (nested), not the API.Ĩ. The Application ID is required to configure the Compliance Connector in Intune and the Microsoft Intune integration settings in Jamf Pro.ħ. Sign-on URL: Enter your Jamf Pro instance URLĦ. Supported account types – leave default option selected Navigate to Azure Active Directory -> Manage -> App registrations.Ĥ. NOTE When configuring a conditional access policy to work with Jamf and Intune DO NOT target the Jamf Native macOS Connector app. NOTE Information is sent to Microsoft Intune only for computers that have completed the device registration process with Azure Active Directory.Ĭreating a new application for Jamf Pro in Microsoft Azure Configuring Microsoft Intune to allow the Jamf Pro integration Configuring Microsoft Intune Integration settings in Jamf Proģ. Creating a new application for Jamf Pro in Microsoft AzureĢ. For a list of the computer attributes that Jamf Pro sends to Microsoft Intune, see I nventory information shared with Microsoft Intune at the end of this post.Ĭonfiguring the connection between Jamf Pro and Microsoft Intune involves the following steps:ġ. When the connection between Microsoft Intune and Jamf Pro is successfully established, Jamf Pro sends the computer inventory state of each managed computer that has checked in with Jamf Pro within the last 24 hours. To enable the connection between Intune and Jamf, configuration is required for both Microsoft Intune and Jamf Pro. End user computers with macOS 10.11 or later.The latest version of the Microsoft Intune Company Portal app.A user with Microsoft Intune Integration privileges in Jamf Pro.Microsoft Intune and Microsoft AAD Premium P1 licenses (recommended Microsoft Enterprise Mobility + Security license bundle).You will need the following to configure Microsoft Intune integration with Jamf Pro:

You can then remediate the identified machines in Jamf’s Self Service for macOS.Intune’s device compliance engine integrates with Azure Active Directory and allows you to identify unmanaged and non-compliant Mac computers in your environment.Jamf delivers information about the management state and health of Apple’s Mac computers to Microsoft Intune’s device compliance engine.Information on the inventory attributes shared from Jamf to Intune.Enrolling into Jamf and registering with Intune.Registering user devices with Azure Active Directory (AAD).Creating and deploying configuration profiles via Jamf.

Creating and deploying device compliance policies in Intune.

Configuration steps for Jamf and Intune.

This article discusses the integration of Microsoft Intune and Jamf Pro. As always, if you have any feedback for us please leave a comment below. Shonda walks through the entire process of configuring integration of Microsoft Intune and Jamf Pro, creating and deploying policies and profiles, as well as enrolling and registering your Mac computers. Support Engineer and resident Jamf expert Shonda Hodge. Hello everyone, today we have a fantastic article from Intune Sr.

Jamf self service