Jamf Pro is an Apple device management solution. This integration extends Jamf Pro to verify policies managed through Blueprints, which configure and deploy device settings in Jamf Pro.
Required Permissions
read: blueprints
read: declarations
Scytale follows the least-privilege principle, limiting permission scopes strictly to what's required for reliable audit evidence collection.
How to Connect
In Scytale, go to 'Integrations'.
Search for Jamf Pro - Blueprints and select 'Connect'.
Paste your client ID & client secret & region & environment ID.
Add a connection name — this will be used to differentiate between your connections — and then select 'Connect'.
You have now successfully connected to Jamf Pro - Blueprints.
How to Generate Credentials in Jamf Pro - Blueprints
Ensure the tenant is on cloud-hosted Jamf Pro 11.15+:
Ensure the tenant has Jamf Account / OIDC login enabled:
Confirm a platform environment exists in Jamf Account and contains the Jamf Pro tenant.
Go to Jamf Account -> Platform environments.
Click on the environment that contains the Jamf Pro tenant.
Note the environment ID, copy it for later.
Jamf auto-groups most organizations' tenants into one environment; where it has not, one must be created in Jamf Account -> Platform environments. Grouping tenants cannot be undone, so this is an account-owner decision rather than an engineering one.
Create an integration (a user with Administrator or a custom role with Integrations privileges) :
Go to your Jamf account and click Integrations on the left side bar
Click on Create integration
Set Name and Description
Choose Scope level: Platform environment,
Select Region (us/eu/apac) on the top right (of the target Tenant), and select the environment that contains the Jamf Pro tenant.Set Permissions, and click Create:
Copy the client_id, generate and copy the client_secret (shown only once).
From the Integration details panel, click “Level details”, and copy the environment ID.












