Jamf
      Back to home
      1. Knowledge Base
      2. Integrations
      3. Jamf

      How to enroll iOS devices with Jamf Pro

      To enroll iOS devices and deploy Senturo for iOS with Jamf Pro, follow the instructions below:

      Prerequisites:

      • Jamf Pro API 
      • iOS 13 or later

      Connect your Jamf Pro instance to Senturo:

      Create API roles and Clients

      1. In Jamf Pro, click Settings in the sidebar.
      2. In the System section, click API Roles and Clients.
      3. Click the API Roles tab.
      4. Click New.
      5. Enter a display name for the API role.
      6. In the Jamf Pro API role privileges field, begin typing the name of a privilege you want to assign, and then select it from the pop-up menu. 
        The required privileges are in the screenshot below:
      7. Click Save.
      8. Click the APl Clients tab at the top of the pane, then click New.
      9. Enter a display name for the API client.
      10. In the API Roles field, add the roles you created in step 6 above. The client will have the cumulative privileges of all assigned roles.
      11. Under Access Token Lifetime, enter the time in seconds that you want access tokens to be valid for.
      12. Click Enable API Client to allow the client to be used to generate a client secret.
      13. Then click Save.

      Copy ClientID and clientSecret keys into Senturo-Jamf integration

      1. Click "Generate client secret" button, then click "Create secret" button.
      2. Copy both the Client Secret and Client ID, then paste on a notepad file.
      3. Navigate to Senturo Integration page.
      4. Click the Connect button for Jamf.
      5. Enter your Jamf Instance URL, then paste the Client ID and Client Secret.


      6. Then click the Sign In button. This will integrate your Senturo account with your Jamf Instance.

       

      Device Enrollment and deployment of iOS app

      1. On the Senturo dashboard, navigate to the Device Enrollment page.

        image-png-Jul-22-2024-12-41-51-4579-PM

      2. Click on "iOS".

      3. Select Multi-Device Enrollment.

      • In the iOS device enrollment section, choose the "Multi device" enrollment option.

      4. Download the PLIST File.

      • Click on the "View Account Key" button to automatically download a PLIST file to your computer.
        • This PLIST file contains the configuration information needed for the MDM solution to enroll iOS devices.

      5. Within your Jamf Pro instance, navigate to Devices then select Mobile Device Apps.

      6. Choose App Store app or apps purchased in volume and click next.


      7. In the Search field, search for Senturo, and Click Next.

      8. Click Add on Senturo on either iPadOS or iOS depending on the use case.

      9. In the General pane, complete the information as required and set the Distribution Method as Install Automatically/Prompt Users to Install.

      Suggestion: Deselect Allow users to remove app (iOS 14 or later) and then navigate to Scope.

      10. Set the Targets (and Limitations/Exclusions if required) and configure Managed Distribution as appropriate.

      11. In App Configuration, copy and paste the content of the PLIST file downloaded from the dashboard in step 4. Then click Save.

      For use in Jamf Pro, the content of the PLIST should be edited to remove the configuration dictionary portion of the plist.

      See structure below:

      <dict>

                      <key>email</key>

                      <string>YOUR SENTURO ACCOUNT EMAIL ADDRESS</string>

                      <key>token</key>

                      <string>YOUR SENTURO ACCOUNT TOKEN</string>

                      <key>device_id</key>

                      <string>$SERIALNUMBER</string>

                      <key>device_name</key>

                      <string>$DEVICENAME</string>

                  </dict>

      12. Once Senturo is deployed, accept the install on the target device. The device will be automatically registered to your Senturo account once you open the app.

      13. Lastly, you will need to accept the following Privacy Control Requests:

      • Background App Refresh
      • Cellular Data
      • Location (Always Allow & Precise Location)
      • Notifications
      Depending on your configurations and MDM solution, the devices may take some time to enroll in Senturo fully. Monitor the process and ensure all devices are accounted for.

      FAQs

      Q: What should I do if the PLIST file fails to upload to the MDM solution? A: Ensure the PLIST file is correctly formatted and that you have copied the account key and token accurately. Refer to your MDM solution's documentation for specific troubleshooting steps.

      Q: How can I verify that all devices have been enrolled successfully? A: Check the device list in the Senturo dashboard and confirm that each device shows the correct status.