Description
Configuring a hybrid setup of Jamf Connect with Microsoft Entra ID and AD FS requires:
A Jamf Connect registered app in Microsoft Entra ID. For instructions, see Jamf Connect Identity Provider Integrations.
A Jamf Connect application in AD FS . For instructions, see the Build a web application using OpenID Connect with AD FS 2016 and later documentation from Microsoft.
Microsoft Entra Connect
Windows Server 2016 (includes AD FS 4.0) or later
CurrentFarmBehavior set to level 3
Lower levels (1 or 2) are not compatible with ROPG which is needed for password sync and validation in Jamf Connect login and menu bar.
Checking Your ADFS Farm Compatibility
Check the following to see if the ADFS farm meets the compatibility requirements:
1. Confirm that the ADFS farm is running on Windows 2016 with ADFS 4.0.
2. To confirm the farm behavior is running level 3 run the following command in Windows Powershell on the ADFS farm: PS C:\Windows\system32> Get-AdfsFarmInformation
If configured to meet the requirements it will return output similar to the following:
CurrentFarmBehavior FarmNodes ------------------- --------- 3 {adfs.yournodenamehere.dev}
More Resources
For more information on hybrid/federated setups see the Federated Integrations page in the Jamf Connect Documentation.