Jamf Account Single Sign-On Configuration - Complete SSO Setup Guide

Learn to configure Jamf Account single sign-on (SSO) in this comprehensive 49-minute conference talk from JNUC2025, presented by William Smith, Technical Enablement Manager at Jamf. Master the complete setup process to unlock AI Assistant, blueprints, and compliance benchmarks in Jamf Pro through unified authentication. Discover why Jamf is transitioning to a cloud-first, microservices architecture and how SSO enables access to shared features across multiple Jamf Cloud products. Explore two authentication methods: Jamf IDs versus identity provider integration with Microsoft Entra ID, Google Workspace, and Okta. Follow step-by-step instructions for domain verification using DNS text records, configuring administrator accounts without email addresses through UPN mapping, and creating failover accounts for break-glass scenarios. Understand the technical implementation of Microsoft Entra ID integration, including token claims configuration and custom username claim mapping. Learn best practices for managing user accounts across multiple Jamf Pro instances, allowing junior administrators access without full Jamf Account privileges, and testing authentication workflows. The session covers Jamf's platform API architecture, consolidating user authentication systems, and preparing your environment for cloud-based microservices. Includes a detailed Q&A session addressing common implementation challenges and troubleshooting scenarios. Perfect for Jamf Pro administrators implementing enterprise SSO, IT security teams managing identity and access management, cloud migration teams, and MSPs managing multiple client instances.

Syllabus

0:00 Jamf Account Single Sign-On for Jamf Pro
0:59 What SSO Through Jamf Account Enables
1:26 Accessing AI Assistant, Blueprints, and Compliance Benchmarks
3:53 The Big Picture: Why Jamf Requires SSO
4:19 Jamf's Cloud-First Development Strategy
5:05 Microservices Architecture: Shared Features Across Products
6:16 Consolidating User Authentication with Jamf Account
10:38 Two Types of Authentication: Jamf ID vs Identity Provider
15:36 Enabling Single Sign-On in Jamf Pro Settings
19:02 Adding an Identity Provider to Jamf Account
20:04 Benefits of Using Identity Providers Google, Microsoft, Okta
21:16 Domain Verification Process with DNS Text Records
23:02 Configuring Microsoft Entra ID as Identity Provider
28:17 Allowing Junior Admins Without Jamf Account Access
30:15 Testing User Authentication with Identity Provider
32:35 Using User Principal Name UPN for Admin Accounts
34:03 Configuring Token Claims in Entra ID
36:15 Setting Custom Username Claim Name UPN
36:38 Switching Identity Provider User Mapping to Username
37:44 Creating Accounts with UPN Instead of Email
41:37 Q&A Session