Creating an extended integration for Jamf users (OAuth 2.0)

Let Oomnitza be your single source of truth!

You'll get visibility of your Jamf users as data from Jamf is automatically transformed into consumable information and actionable insights.

Connect Oomnitza and Jamf in minutes

Get the information and insights that you need to reduce costs and the time that you spend on administration tasks such as:

• Configurable dashboards and list views of key user information
• Configurable reports to share information about users with your colleagues and management

Important
OAuth 2.0 authentication is supported for the Classic API in Jamf Pro 10.35.0 or later versions. 
For more information, see Classic API Authentication Changes.

Before you start

To stream Jamf user data into Oomnitza, you must add your Jamf OAuth 2.0 credentials to the vault in Oomnitza. 

Best practice
For the integration with Oomnitza, create a dedicated user account in Jamf.

The user account that you create must have create, read, update,  and delete privileges for user accounts.

Add credentials to the vault in Oomnitza

To add Jamf credentials to Oomnitza, see Adding Jamf (OAuth 2.0) credentials.

Add the Jamf subdomain to global settings (Check whether presets will be available) 

To save time entering information when you create workflows, you can add your Jamf subdomain as a global variable to Oomnitza.

1. Click Configuration > General > Global Settings.
2. Click Add new variable (+). 
3. Enter Jamf.Subdomain as the variable name.
4. Enter the subdomain of your Jamf instance. If the URL is 
   http://<customer-subdomain>.jamfcloud.com, you enter the customer-subdomain part of the URL.
5. Click SAVE.

Info and connect details

1. Click Configuration > Integrations and then click Integrations List View .
2. On the Integrations page, scroll down to the Extended section for User Integrations.
3. Click NEW INTEGRATION.
4. In the New User Integration sidebar, click Jamf.
5. To integrate Oomnitza with the Jamf User Load OAuth 2.0, click APPLY and then click NEXT twice.

Connect page

Best practice
To ensure that only live user records are streamed from Jamf to Oomnitza, choose Update only as your integration preference. When you run the integration, you can check the error logs to see which user records weren't uploaded and why they weren't uploaded. You can then decide whether to upload the user records that were skipped by changing your integration preference.

1. Enter a descriptive name for the integration such as Jamf Users. That'll be the name of the user integration that is shown on the Integrations page.
2. From the User Selection list, select User plus SaaS User or User only.
3. If you select User plus SaaS User and you have multiple instances of the same SaaS application, select the application from the SaaS Selection list. If you have a single instance of the SaaS application, skip this step.
4. From the installation type list, select Cloud.
5. From the Credentials list, select the credentials from the Oomnitza vault.
6. From the Integration Preferences list, select Update only.   
7. Enter the name of the user of the integration.
8. Enter the complete address of your Jamf instance.
   Example: http://<customer_subdomain>.jamfcloud.com
9. Click Next.

Mappings

Map the Jamf fields to Oomnitza fields and create custom mappings to get the user information that you need.

Complete the following actions:

1. Click SMART MAPPING.
2. Select the Email field as the sync key.
3. Map the Jamf Email field to the Username field. Click the down arrow and select the Username field.
4. Map the Jamf Id field to the Jamf User Id field. Click the down arrow and select the Jamf User Id field.  Alternatively, if the Jamf User Id field is not available, complete these steps:
   1. To create a custom field, right-click the Jamf Id field, and select Add new Oomnitza users field.
   2. Change the label of the field to Jamf User Id.
5. From the Role list, select Employee.

Standard Jamf to Oomnitza mappings

The following Jamf fields can be mapped to Oomnitza: 

Connector Sync Time
Custom Photo Url
Email
Email Address
Enable Custom Photo Url
Full Name
Id
Ldap Server Id
Ldap Server Name
Managed Apple Id
Name
Phone Number
Jamf Position

Want to map more Jamf fields to Oomnitza?
Contact Support, or see Mapping extended connectors.

When you've completed mapping the Jamf fields to the Oomnitza fields, click NEXT.

Schedule

By default, Jamf user data is streamed to Oomnitza once every day.

You can configure the schedule to meet your needs such as changing the interval or changing the time so that the data is streamed when your system isn't busy.

1. Configure your schedule.
2. Click FINISH.

Result

A new tile is created for the integration on the Integrations page. 

What to do next

If you want to see what information is collected now, click the tile on the Integrations page and click RUN.

Figure: Mock-up for illustration purposes

If you want to change the integration settings, you can click a navigation link on the page, such as 4 Mappings, and edit the settings. 

Create workflows

You can use the SaaS User Role Retrieval block to deactivate SaaS users in Oomnitza. 

1. Click Configuration > Workflow > SaaS Users.  
2. Click Add workflow (+).  The Begin and End blocks are automatically added to the canvas.
3. Enter the name of the workflow and a description.
4. From the Integrations section, drag and drop the SaaS User Role Retrieval block onto the canvas.
5. Edit the SaaS User Role Retrieval block.
   1. To find the preset, type Jamf.
   2. Click the right arrow (>) next to Jamf SaaS User Role.
   3. Select your credentials and enter the subdomain of your Jamf instance.
6. Edit the Begin block.
   • Create a schedule for running the workflow.
   • Use a rule to identify the SaaS software 
   • Add rules to trigger the workflow . For example, you can add a rule to deactivate users who haven't logged in for a number of days. 
7. Connect the workflows.
8. Validate, save, and launch the workflow.

Unleash the power of Oomnitza

To get valuable actionable insights that help you manage your assets, learn how to:

• Configure dashboards for your assets
• Configure custom reports
• Configure workflows for automating complex and repetitive tasks

 See Getting started

Did you know
You can also create extended connector integrations for Jamf assets and software. 
 Extended Connector Integration for Jamf Apple Assets and Software (Basic Auth)
Extended connector integration for Jamf Users (Basic Auth)
Jamf Device Enrollment Extended Connector
 Extended Connector Integration for Jamf Mobile Assets (OAuth 2.0)
Extended Connector Integration for Jamf Mobile Assets (Basic Auth)