#JAMF PRO SHARED IPAD HOW TO#
#JAMF PRO SHARED IPAD MAC#

Users don't need to use the Authenticator or Company Portal apps. On Apple devices, Apple requires that the SSO app extension and the app (Authenticator or Company Portal) be installed.

#JAMF PRO SHARED IPAD HOW TO#

For a list of options on how to install the Company Portal app, see Jamf Pro's documentation. The Company Portal app can be installed manually by users, or by deploying the app through Jamf Pro. On macOS 10.15 and newer devices, install the Company Portal app. For information on how to install the Microsoft Authenticator app, see Jamf Pro's documentation. The Microsoft Authenticator app can be installed manually by users, or by deploying the app through Jamf Pro. On iOS/iPadOS 13.0 and newer devices, install the Microsoft Authenticator app. To use the Microsoft Enterprise SSO plug-in for Apple devices:

Supplemental Terms of Use for Microsoft Azure Previews.

Certain features might not be supported or might have restricted behavior. It's not recommended to use in production.

This preview version is provided without a service level agreement (SLA). The Microsoft Enterprise SSO plug-in for Apple Devices is in public preview. This article shows how to deploy the Microsoft Enterprise SSO plug-in (preview) for Apple Devices with Jamf Pro. They can bypass interactive sign-in prompts for the signed in user.įor more information, see Microsoft Enterprise SSO plug-in for Apple devices - apps that don't use MSAL. Just add the application bundle ID or prefix to the extension configuration.įor example, to allow a Microsoft app that doesn't support MSAL, add com.microsoft. Apps that don't support MSAL can be allowed to use the extension. Once set up, apps that support the Microsoft Authentication Library (MSAL) automatically take advantage of the Microsoft Enterprise SSO plug-in (preview). It reduces the number of authentication prompts users get when using devices managed by Mobile Device Management (MDM), including Jamf Pro. This plug-in uses the Apple single sign-on app extension framework. IPads that are associated with the PreStage enrollment and meet Shared iPad requirements are enrolled with Jamf Pro as Shared iPad.The Microsoft Enterprise SSO plug-in (preview) provides single sign-on (SSO) to apps and websites that use Microsoft Azure Active Directory (Azure AD) for authentication, including Microsoft 365. The mobile devices listed on the Scope tab are the mobile devices that are associated with device enrollment (formerly DEP) via the server token file (.p7m) you downloaded from the Apple School Manager website. Note: The maximum number of user accounts is 10 by default.Ĭlick the Scope tab and configure the scope of the PreStage enrollment by selecting the checkbox next to each iPad that you want to add to the scope. Select the maximum number of user accounts that can be stored with Shared iPad from the Number of users pop-up menu. Use the General payload to enable Shared iPad.

If you are editing an existing PreStage enrollment, click the PreStage enrollment you want to edit, and then click Edit. For additional instructions on creating a new PreStage enrollment, see the Mobile Device PreStage Enrollments section of the Jamf Pro Administrator’s Guide. If you are creating a new PreStage enrollment, click New.

#JAMF PRO SHARED IPAD MAC#

Note: If your environment does not use Shared iPad, you can still configure classes to be used with Apple's Classroom app.įor instructions on creating a class, see the Classes section in the Jamf Pro Administrator's Guide.įor a list of requirements to use Apple's Classroom app, see the following Classroom Help for iPad and Mac computers: This allows you to add a smart or static mobile device group when you create a class in Jamf Pro for use with Apple’s Classroom app. For more information about mobile device PreStage enrollments, see the Mobile Device PreStage Enrollments section in the Jamf Pro Administrator's Guide.Īfter you enroll iPads with Jamf Pro as Shared iPad, you can create a mobile device group for Shared iPad in your environment.

This allows you to limit the number of locally stored user accounts on the iPad. When you enable Shared iPad in a PreStage enrollment, you can select the maximum number of user accounts that can be stored with Shared iPad. Only iPads that are associated with the PreStage enrollment and meet Shared iPad requirements can be enrolled with Jamf Pro as Shared iPad.

To use Shared iPad in your environment, you need to enable Shared iPad in a mobile device PreStage enrollment and then enroll iPads with Jamf Pro using the PreStage.

Jamf pro shared ipad