Description
With the release of Jamf Connect 3.x, the Jamf Connect installer is for the login window only and the menu bar functionality (password syncing, privilege elevation, kerberos, etc.) is now integrated with Self Service+.
When Self Service+ is deployed with Jamf School it will only include:
the Account management dashboard items (Jamf Connect menu bar)
Security dashboard items (if Jamf Protect is installed on computers)
The app deployment self service features in Self Service+ are not supported with Jamf School deployment. Jamf School Teacher & Student continues to be the end user app of choice for on demand app installation.
This article details deploying Jamf Connect 3.x and Self Service+ to devices during Automated Device Enrollment with Jamf School.
More Resources: The steps for updating Jamf Connect on computers with Jamf Connect 2.45.1 or earlier installed can be found in 🔗 Upgrade Jamf Connect & Self Service+ with Jamf School.
Requirements for this Workflow
Jamf Connect configurations (login window & menu bar profiles)
In most cases existing configurations will continue to work if you have them from a previous deployment.
NOTE: Configuring Jamf Connect settings will not be covered in this article.
Download the Jamf Connect DMG from Jamf Account and mount the DMG to extract the Jamf Connect Login (3.x) file.
NOTE: For new deployments the most recent release is recommended.
Download the Self Service+ package file from Jamf Account.
Preparing for Deployment
Upload the Jamf Connect and Self Service+ packages to Jamf School. See Adding In-House Apps and Packages for assistance if needed.
Upload your Jamf Connect login and menu bar configurations to Jamf School as custom profiles if they aren't in Jamf School yet. For more information see Device Profiles.
Create an Automated Device Enrollment Profile for the device that need Jamf Connect installed. For assistance see Creating an Automated Device Enrollment Profile
NOTE: It is important not to use an existing Automated Device Enrollment Profile as this process is intended only for devices going through first time Jamf Connect Setup, using an existing Automated Device Enrollment Profile may get unintended devices caught up in the workflow.
Under the Profiles and packages tab of the newly created Automated Device Enrollment Profile, add the Self Service+ and Jamf Connect packages, add the Jamf Connect profiles, and then save your changes.
At a minimum you will have 2 configurations (Jamf Connect login & menu Bar) and 2 packages (Jamf Connect login & Self Service+).
NOTE: It is highly recommended not to add more than what is absolutely required to the enrollment packages and profiles.
To ensure the profiles stay installed on computers after enrollment, create a new Smart Device Group with the
Automated Device Enrollment Profilecriteria to find all devices enrolled in the group created in the previous steps.The steps for creating a Smart Device Group can be found in the Jamf School Documentation.
Add this smart group to the scope for all configuration profiles included in the Automated Device Enrollment Profile.
Deployment Process
Assign your device(s) to your newly created Automated Device Enrollment Profile.
If you are re-provisioning previously managed devices, wipe the devices if not already done.
Power on the device(s) and proceed through Setup Assistant.
During the enrollment process devices are configured and installations for Jamf Connect login and Self Service+ are carried out automatically.