Jamf Connect Configuration
- Last UpdatedOct 14, 2025
- 3 minute read
Jamf Connect Configuration is an app included in the Jamf Connect DMG that allows administrators to automatically maintain computer configuration profiles for Jamf Connect apps.
You can use Jamf Connect Configuration to do the following:
Select and specify Jamf Connect preferences.
Test configurations to confirm a successful connection with your cloud identity provider (IdP).
Save configuration profiles, which you can install locally or upload for deployment with an MDM solution. Configuration profiles can be saved in .mobileconfig or PLIST format.
Upload configuration profiles in .mobileconfig format to Jamf Pro.
Edit, duplicate, or import existing Jamf Connect configuration profiles.
When you create a configuration profile, you can either save the file locally or upload it to Jamf Pro. If uploading to Jamf Pro, keep the following in mind:
Configurations must be saved in .mobileconfig format.
Profile file names cannot match an already existing name of a configuration profile in Jamf Pro.
You cannot upload updates to an already existing configuration profile with the same name.
An integration with your cloud identity provider and required values from the integration (for example, client ID). For instructions, see Jamf Connect Identity Provider Integrations.
- Uploading a configuration profile to Jamf Pro requires the following:
Credentials to a Jamf Pro user account with administrator privileges.
The Classic API must have basic authentication allowed under Password Policy in your Jamf Pro settings.
To upload a configuration profile saved locally to Jamf Pro, the profile must be signed.
- In Jamf Connect Configuration, click the + icon at the bottom-left of the window.
- Name your new configuration by clicking on it in the sidebar.
- Click the Identity Provider tab.
- Configure authentication settings:
- (Optional) Configure advanced authentication settings in the Okta or OIDC settings sections.
- Click the Login tab.
- Configure settings for the login window, including user creation settings.
- Click the Connect tab.
- Configure settings for Self Service+, including Kerberos integration settings.
- (Optional) Click the </> button in the top-right and do the following:
- Click the Test button to confirm that your authentication settings are correctly configured.
- (Optional) Save and export your configuration profile.
If you selected the Jamf Pro Upload checkbox, the configuration profile is automatically uploaded to Jamf Pro.
You can use Jamf Connect's testing feature to save a test user's access, refresh, an ID token after a successful authentication.
You must have a working configuration for an identity provider (IdP) that uses the OpenID Connect authentication protocol with Jamf Connect (e.g., Microsoft Entra ID, Google Cloud ID, OneLogin, PingFederate).
Each token is saved as an encoded string in a .txt file.
jamf-refreshToken.txt
jamf-accessToken.txt
jamf-idToken.txt
To decode the tokens, you can use a JSON web token (JWT) decoder tool, such as Auth0's jwt.io website.