Description
This page walks you through the steps needed to integrate Jamf Safe Internet and Jamf School, create content and security policies in Safe Internet, and enroll devices to receive these policies using Jamf School.
This article assumes use of the default Jamf Safe Internet Activation Profile, which can be used for both computers and mobile devices in Jamf School. If you need to create a new Activation Profile, follow the steps in the Jamf Safe Internet Documentation.
This article covers:
Integrating Jamf School and Jamf Safe Internet
In Jamf School go to Organization > Settings and click Safe Internet under Modules.
Click Connect.
Log in to Safe Internet as an admin, and choose the portal that you want to configure with UEM Connect.
Navigate to Settings and click UEM Integration.
Choose the Jamf School platform for the UEM Vendor.
Copy and paste the Jamf School URL into the UEM Server URL field.
Enter the Jamf School Network ID.
Your Network ID is listed in Jamf School under Devices > Enroll Device(s) > On-device enrollment (iOS & macOS).
Generate and API Key in Jamf School and enter it in Safe Internet
To generate the key in Jamf School, go to Organizations > Settings and select the API tab.
Click Add API Key.
Give the key a name and fill in description if desired. We want to be able to identify this key is used for Safe Internet.
Click Apply.
From the main API page, copy the key. Paste it in the API key field in Safe Internet.
Click Test & Save.
Creating Device Groups in Safe Internet
In Jamf Safe Internet, go to Devices > Device Groups.
Click Add and select Group.
Give the group a name and click Save.
Repeat steps 2 and 3 to create all desired groups.
Completing UEM Connection Settings - Group Mappings
To complete the Group Mappings in Safe Internet, go to Settings > UEM Integration.
In the 'Group membership mapping' section click Add.
Select the group name from the dropdown box synced over from Jamf School and then choose the group that you created in Jamf Safe Internet that you want it to map to.
Click Add to add more groups.
(Optional) The other UEM Connect Settings (sync status, auto-delete behavior, risk UEM signaling, sync refresh interval) can be configured at this time
See UEM Connect Settings for more information.
Scroll up and click Save when complete.
Setting up Content and Security Policies
In Safe Internet, go to Policies and click Content policy.
Click the Group level box and select the group from the dropdown box you want to create policy rules for.
It is recommended to set the Base policy first that will apply to all devices. Then you can repeat the steps for the individual groups you configured previously.
Configure the Default rules page as desired:
Check the boxes for the Default Rules you want to apply.
Adjust the Content rules as desired.
Adjust the Security rules at the bottom of the page as desired.
Under Search rules, check the boxes for Google Safe Search and/or YouTube Restricted Mode if they aren't already set by a default rule.
On the Custom rules tab, define any custom rules desired, for more information see Adding Custom Rules.
Click Save and apply (next to Group level field in upper-right corner).
Repeat the steps above for each group that needs specific policy configurations beyond the base policy.
Creating Jamf Safe Internet Profiles in Jamf School
In Jamf School, go to Profiles > Overview and click +Create Profile.
Select the desired platform (iOS or macOS).
Click Device Enrollment and click Next.
Give the Profile a name and a description if desired. Click Next.
Click Finish.
Select the Safe Internet payload and click Configure.
The Active Policy box should display the default Activation Profile. If other Activation Profiles are configured, click the dropdown box to select which profile you would like to use.
Click Save.
Click Scope.
Click the + button, then click the dropdown box and select the device group to receive the profile.
Repeat step 10 for any other applicable device groups.
Click Save.
Adding Jamf Trust App (iOS only)
Get app licenses for Jamf Trust in Apple School Manager.
In Jamf School go to Apps > Inventory.
Click Jamf Trust.
If there is not a record for Jamf Trust, click Sync with Apple School Manager.
Click the + button at the bottom of the page to add desired device groups to the app scope. Repeat for all desired groups.
Click Save.
Devices that are members of the device groups in scope for the Jamf School profile (and the Jamf Trust app for iOS), will show in Jamf Safe Internet under Devices > Device Groups once the content from Jamf School installs as part of the group specified in UEM Connection Settings group mappings.
Please note: To protect user privacy, devices/users are not reported in an identifiable manner. Jamf Safe internet is to be used preventatively. The Reports section shows aggregate details of sites accessed and blocked as well as spam, malware and phishing sites that are accessed and blocked.