Integrate Jamf Pro Admin Console with Okta

Enable provisioning for your Jamf Pro Admin Console instance to integrate with Okta.

Before you begin

  • You have an active Jamf Pro Admin Console account with privileges to manage users.
  • You've created Jamf Pro API roles with the following privileges. See Jamf Pro API roles and clients.
    • Push Password Update: Change Password.
    • User Management: Create Accounts, Change Password, Read Accounts, Update Accounts, Delete Accounts, and Read Sites.
  • You've created Jamf Pro API clients using the API roles. See Jamf Pro API roles and clients.

Configure provisioning

To configure provisioning for Jamf Pro Admin Console, complete the following steps:

  1. In the Admin Console, go to ApplicationsApplications.

  2. Search for and select the Jamf Pro Admin Console integration.
  3. On the General tab, enter the Application label.
  4. Enter the Domain.

    The Domain must not include the following:

    Protocols: For example, https://.

    Paths: For example, /index.html.

    Unsupported ports: Only ports 80, 443, and 8443 are permitted.

    Invalid formatting: Domains can't start or end with a hyphen (for example, -jamf.com or jamf-.com).

  5. Click Done.
  6. Click the Provisioning tab, click Configure API Integration, and select Enable API integration.
  7. Enter your Client ID and Client Secret.
  8. Optional. Select Import Groups if you want to import user groups into Okta.
  9. Click Test API Credentials.
  10. When the authorization process completes, click Save.
  11. Select To App under Settings. Click Edit, and then select the provisioning features that you want to enable.
  12. Click Save.

Related topics

Jamf Pro Admin Console supported features