Source: https://manu-tests-all-orgs.docs-staging.pageloop.ai/integrations/asset-endpoint-management/jamf

# Jamf

# Jamf

## Jamf: Overview and capabilities

Integrate Atomicwork with Jamf to strengthen your asset management by enabling seamless synchronization of Apple device data (from macOS, iPadOS, and iOS devices).

Here are the key capabilities you can unlock with this integration:

- **Discover and sync devices seamlessly:** Automatically import and update all managed Apple devices and their Jamf attributes, improving asset visibility and giving incidents and requests richer device context.
- **Manage devices remotely:** Perform actions like restart, shutdown, lock etc. remotely, allowing quick responses to security incidents and lost devices.
- **Link assets to incidents/requests:** Link and manage assets directly from support tickets, enabling IT teams to troubleshoot faster without switching platforms.

With these capabilities, IT teams can improve asset visibility, enforce security policies, and manage devices efficiently.

---

## Jamf: Permissions and setup

### Permissions

To connect your Atomicwork and Jamf accounts, you need:

- **Atomicwork admin access**: You need org admin access in Atomicwork.
- **Jamf Pro access:** You need access to a Jamf Pro account with API access.
- **Jamf Pro API URL and credentials**

### Setup

### Step 1: Create an API role and client for Atomicwork in Jamf

To enable Atomicwork to access the Jamf Pro API, create an API role with the required permissions and generate a client ID and secret.

Refer to [Jamf's article on creating API roles and clients](https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/API_Roles_and_Clients.html) for detailed instructions. When creating the API role, select the following permissions under **Jamf Pro API role privileges**:

| **Role privilege**                           | **Corresponding endpoint**                             | **Purpose**                                                                             |
| -------------------------------------------- | ------------------------------------------------------ | --------------------------------------------------------------------------------------- |
| Read Computers                               | /computers-inventory, /computers-inventory-detail/{id} | Read inventory data for all computers as well as detailed info for a specific computer. |
| Read Mobile Devices                          | /mobile-devices, /mobile-devices/{id}                  | List mobile devices in inventory and read detailed info for a specific mobile device.   |
| View MDM command information in Jamf Pro API | /mdm/commands                                          | Execute or view MDM commands such as reset or restarting devices.                       |

Once you've created the API client, copy the client ID and secret to use in the next step.

### Step 2: Connect Jamf with Atomicwork

- As an Atomicwork admin, navigate to **Settings > App Store > Jamf,** and click on **Connect**.
- In the Jamf integration setup page, enter the following details:
  - Jamf API URL
  - Client ID
  - Client Secret
- Click on **Test** to ensure Atomicwork can successfully authenticate with Jamf.
- If the authentication is succesful, click on **Connect** to complete the process.

> \[!NOTE]
> **Note:** Manual MDM-Atomicwork attribute mapping is not available for Jamf asset sync. For accounts with configured Jamf mappings, those mappings remain preserved, and additional fields appear alongside existing asset data.

### Step 3: Enable asset sync

- On the Jamf app page, click **Enable** against **Discover assets** to start automatically ingesting Jamf asset data into Atomicwork.
- Atomicwork brings in the full set of Jamf attributes exposed to the integration, such as device hardware, OS and compliance state, enrollment status, last check-in, network configuration, installed software, and user assignment.
- After the initial sync, Atomicwork will sync asset info from Jamf every 24 hours.

---

## Jamf: Managing devices and remote actions

The Atomicwork-Jamf integration enables IT teams to manage Apple ecosystem devices (macOS, iPadOS, iOS) efficiently. With a centralized view of all assets—combining native assets and data from other integrations like [Intune](https://support.atomicwork.com/en/articles/12284085) and [Kandji](https://support.atomicwork.com/en/articles/12284099)—administrators can track device health, enforce security policies, and respond to incidents quickly.

### Viewing asset information

Navigate to **Assets** from the left sidebar to view all assets in your organization. Assets synced from Jamf are marked with a Jamf logo. Use filters to refine searches based on attributes like device type, status, or assigned user.

Each asset contains detailed information with synced attributes such as:

- Device name, serial number, hardware details, and assigned user
- Operating system, OS version, compliance state, and enrollment status
- Last check-in time, storage or disk information, and network configuration
- Installed software and other device attributes available from the source

The exact attributes available can vary based on the source system and the data it exposes.

### Performing remote actions

Remote actions help your IT team secure and manage company devices efficiently. For assets synced from Jamf, the following actions can be performed directly from Atomicwork:

- **Lock**: Remotely locks a lost or stolen device, preventing unauthorized access. A six-digit PIN must be provided to lock the device.
- **Wipe**: Erases all data on a device and restores it to factory settings. This is useful when an employee leaves the company or a device is stolen.
- **Restart**: Reboots the device to troubleshoot issues or apply updates.
- **Shutdown**: Powers off the device, typically used for security enforcement or maintenance.

To execute a remote action on any device:

- Search or navigate to the required asset in the **Assets tab** from the left navbar.
- Click on the **Actions** menu and select the desired action.
- The request is sent to Jamf, and the status is logged in Atomicwork.

For example, if a remote employee reports their company-issued iPad as lost, an agent or admin can immediately lock the device and later wipe it if not recovered. This prevents unauthorized access to company data while ensuring compliance with security policies.

### Linking devices to incidents

Linking devices to incidents or requests provides additional context and speeds up resolution. To link a device to an incident or request:

- Navigate to the incident or request and click on **+ Add** against **Linked assets** in the Request Details tab.
- Atomicwork automatically suggests devices assigned to the affected user.
- You can also manually search and link any relevant asset, as needed.
- Once linked, clicking on the asset opens the Asset details tab within the request where you can take remote actions instantly.

If an employee raises an incident saying their MacBook is running slow, Atomicwork will automatically identify the device assigned to them so you can link it to the incident. From the Asset details tab, you can diagnose the issue better by reviewing its last check-in time, checking available storage, verifying the OS version, and even remotely restarting it to resolve potential software issues.

---