Jamf

Jamf is an endpoint management solution that enables scalable and centralized management of Apple mobile devices and personal computers:

• Efficient and effective administration of endpoints

• Designed to maximize operational efficiency and includes automated capabilities for device management and troubleshooting

• Polling behavior when On Demand Lookup is enabled: Single device lookup using the MAC address

• Supports registering devices through Jamf connecting to the network via wired Ethernet interface

FortiNAC collects the following host data from Jamf:

• Type (MacOS/IOS primarily)

• IOS/OSX

• Owner (User)

• Host Name

• Application Data (if configured)

Requirements

FortiNAC

• Supported Versions

• Minimum Version: 8.8.0 +

• Bearer Token authentication support: 9.4.6 +, F7.2.6 +, F7.4.0 +

Jamf

• Supported Versions: Jamf Pro v10.x +

Considerations

• Ethernet MAC addresses for AppleTVs may not be discoverable through FortiNAC. This is due to a limitation in JAMF where the Ethernet MAC address is not searchable within JAMF itself.

• The integration steps in FortiNAC are the same regardless of the authentication type configured in Jamf.

If Bearer Token authentication is enabled in Jamf, FortiNAC retrieves the token from the API using the Basic authentication credentials (Username/Password). The token is then used for all other calls. Once the token expires, FortiNAC retrieves a new token using the Username/Password.

Configure Jamf

If not already existing, create an administrator account for API access. This will be used by FortiNAC.

• Read Only access is sufficient

• Password cannot contain "@" character. This can cause authentication failure.

For details regarding Basic and Bearer Token authentication support in Jamf, reference

https://developer.jamf.com/jamf-pro/docs/classic-api-authentication-changes

Proceed to Configure FortiNAC.