Jamf

Jamf Integration Setup

This guide will walk you through setting up the Jamf integration to collect computer inventory data.

Prerequisites

Before you begin, ensure you have:

• Access to your Jamf Pro instance
• Administrative privileges to create service accounts in Jamf
• Your Jamf instance URL (e.g., https://your-organization.jamfcloud.com)

Required Permissions

The integration requires an API client with Computer Read privileges. This allows the integration to retrieve computer inventory information from your Jamf Pro instance.

Setup Steps

1. Create an API Role in Jamf

Jamf Pro uses API Roles and Clients for secure API access via OAuth 2.0 client credentials.

1. Log in to your Jamf Pro instance
2. Navigate to Settings → System → API Roles and Clients
3. Click the API Roles tab
4. Click New to create a new role
5. Enter a descriptive display name (e.g., “Integration - Computer Read”)
6. In the Jamf Pro API role privileges field, add the following privilege:
   • Read Computers (or similar Computer Read permissions as needed)
7. Click Save

2. Create an API Client in Jamf

1. In Settings → System → API Roles and Clients
2. Click the API Clients tab
3. Click New to create a new client
4. Enter a descriptive display name (e.g., “Glue Integration Client”)
5. In the API Roles field, add the role created in Step 1
6. Under Access Token Lifetime, set the token validity period in seconds (default is typically sufficient)
7. Click Save
8. Click Edit on the newly created client
9. Click Enable API Client
10. Click Save

3. Generate a Client Secret

1. Navigate to the API client created in Step 2
2. Click Generate Client Secret (a confirmation dialog will appear)
3. Click Create Secret
4. Important: Copy and securely store both the Client ID and Client Secret immediately - the secret will only be displayed once

Note: If you lose the client secret, you’ll need to rotate it to generate a new one, which will invalidate the previous secret.

4. Configure the Integration

To configure the Jamf integration in Glue, you’ll need to provide:

• Jamf Instance URL: The full URL of your Jamf Pro instance (e.g., https://your-organization.jamfcloud.com)
  • Do not include trailing slashes
  • Ensure the URL is accessible from your network
• Client ID: The client ID from the API client created in Step 2
• Client Secret: The client secret generated in Step 3

Security Note: The integration uses OAuth 2.0 client credentials flow to authenticate with Jamf Pro. Access tokens are automatically generated and refreshed as needed.

5. Add Data Source Credential

Create a credential in Glue to store your Jamf API client authentication:

1. Follow the instructions in Creating a New Credential
2. Use the Client ID as the username and Client Secret as the password from Step 3
3. Give the credential a descriptive name (e.g., “Jamf Production API Client”)

For additional details on managing credentials, see the Data Source Credentials section.

6. Create the Jamf Data Source

Add a new data source to connect to your Jamf instance:

1. Follow the instructions in Creating a New Data Source
2. Select Generic as the data source type
3. Enter your Jamf Instance URL
4. Select the credential created in Step 3
5. Enable the data source once configuration is complete

For more information on managing data sources, refer to the Data Sources section.