Jamf Pro, is a comprehensive management system for Apple macOS and iOS devices. With Jamf, IT Technicians can proactively manage the entire lifecycle of Apple devices. This includes deploying and maintaining software, responding to security threats, distributing settings, and analyzing inventory data.
First, create a Jamf API role and client
Login to your Jamf tenant, i.e.
https://<tenant>.jamfcloud.com
Click the "Settings" icon
Click "API Roles and Clients"
Click the "API Roles" tab and then "+ New"
Name the role, choose the privileges for the role and click "Save"
Click the "API Clients" tab and then "+ New"
Name the client, choose the API role you created, click "Enable API client" and then "Save"
Click "Generate client secret"
Click "Copy client credentials to clipboard" and paste into a text editor, then click "Close"
Lastly, create a Jamf credential in Tines
You will need to create three credentials:
Two Text type: "jamf_client_id" and "jamf_client_secret"
One HTTP request type: "Jamf"
Text type
Navigate to the team that will be using the API and click "Credential"
Click "+ New Credential" and select "Text"
Input the values for the Jamf credential
Name: jamf_client_id
Description: Optional
Value: Client ID you copied earlier
Optional
Domains: Ensure this credential can only be used when making HTTP requests to specific domains
Access: What other teams can also use the API
Click "Save"
Click "+ New Credential" and select "Text"
Input the values for the Jamf credential
Name: jamf_client_secret
Description: Optional
Value: Client Secret you copied earlier
Optional
Domains: Ensure this credential can only be used when making HTTP requests to specific domains
Access: What other teams can also use the API
Click "Save"
HTTP request type
Navigate to the team that will be using the API and click "Credentials"
Click "+ New Credential" and select "HTTP Request"
Input the values for the Jamf credential
Name: Jamf
Description: Optional
URL:
https://<tenant>.jamfcloud.com/api/oauth/token
Content Type: Form
Method: post
Payload: Copy the below object and paste into the "Plain code" section:
{
"client_id":"<<CREDENTIAL.jamf_client_id>>",
"client_secret":"<<CREDENTIAL.jamf_client_secret>>",
"grant_type":"client_credentials"
}Click "Run options", navigate to the
access_token
key and double click on the key
Location of token from response: Paste the path to the token in the value pill
Optional
Domains: Ensure this credential can only be used when making HTTP requests to specific domains
Access: What other teams can also use the API
Click "Save"
Your credential should look like the following:
More on creating credentials in Tines here.
You can also find a selection of Jamf stories in the story library.