Connect to Jamf Pro through Access

This guide covers how to configure Jamf Pro in Cloudflare Zero Trust.

​​ Prerequisites

• Admin access to a Jamf Pro account

​​ 1. Collect Jamf Pro information

1. In Jamf Pro, go to Settings > Systems > Single Sign-On > Edit.
2. Copy the pre-populated URL in Entity ID.
3. Paste the URL in a web browser to download the Jamf metadata file.
4. Open the metadata.xml file in a text editor, and copy the values for Entity ID and Assertion Consumer Service.

​​ 2. Add a SaaS application to Cloudflare Zero Trust

1. In Zero Trust Open external link , go to Access > Applications.
2. Select Add an application > SaaS > Select .
3. For Application, type Jamf or Jamf Pro and select the textbox that appears below.
4. For the authentication protocol, select SAML.
5. Select Add application.
6. Fill in the following fields:
   • Entity ID: Entity ID value from Jamf Pro metadata file.
   • Assertion Consumer Service URL: Assertion Consumer Service value from Jamf Pro metadata file.
   • Name ID format: Email
7. Copy the SAML Metadata endpoint.
8. Select Save configuration.
9. Configure Access policies for the application.
10. Select Done.

​​ 3. Add a SAML SSO provider to Jamf Pro

1. In Jamf Pro, go to Settings > Single Sign-On > Edit.
2. In Identity Provider menu, select Other.
3. Label Other provider as Cloudflare.
4. Fill in the following fields:
   • Entity ID: Entity ID from Jamf Pro metadata file.
   • Identity Provider Metadata Source: SAML Metadata endpoint from application configuration in Cloudflare Zero Trust.
   • Identity Provider User Mapping: Name ID
   • Jamf Pro User Mapping: Email
5. Turn on Single Sign On.

​​ 4. Provision Users Locally in Jamf Pro

1. Go to Settings > Systems > User accounts and groups > New.
2. Create the users as defined in your identity provider by entering each user’s:
   • Username
   • Full name
   • Email
   • User type
   • Level of access
   • Privileges

​​ 5. Test the Integration

Log out of Jamf Pro and open an incognito browser window. Go to your Jamf Pro URL. You will be redirected to the Cloudflare Access login screen and prompted to sign in with your identity provider.