Hi All. Time for another post from the tales of an Integrator!
This time I was helping a customer integrator Azure Active Directory with Jamf Cloud for SSO/SAML. Now Jamf has a number of KB articles on the matter but there’s always a window between the last time these are updated and when an IdP vender makes some changes. Additionally, sometimes it’s helpful to utilise a guide written from a different prospective to get a better understanding.
After searching around for updated guides and more information, I stumbled across a new guide from Microsoft themselves. This can be found here
Why is this better?
Well, firstly it should be more current with the Azure specific options (since both the KB and Azure are under Microsoft’s control).
Secondly, was this little gem I found part-way through:
That’s right! you can install a Microsoft browser extension that will automatically configure the SSO settings in your Jamf Cloud console with the right options!
This should speed up the process, as well as reduce mistakes and miss-configurations!
I’m afraid there doesn’t seem to be an extension for Safari, so you’ll have to use Chrome or Firefox. If anyone has a chance to test with IE and Edge, let me know and I’ll update the post.
I’ve also included links to the Jamf KBs below:
- Jamf Pro 10.10 administrators guide – Single Sign On Settings
- Configuring Single Sign-On with Active Directory Federation Services
- Troubleshooting Single Sign-On in Jamf Pro
This post covers a different (arguably better) way to setup Azure SSO with Jamf Pro. As always, if you have any questions, queries or comments, let me know below (or @daz_wallace on Mac Admins Slack) and I’ll try to respond to and delve into as many as I can.
The usual Disclaimer:
While the author has taken care to provide our readers with accurate information, please use your discretion before acting upon information based on the blog post. I will not compensate you in any way whatsoever if you ever happen to suffer a loss/inconvenience/damage because of/while making use of information in this blog.