Skip to main content

Jamf Pro - Blueprints - User Guide

In this article, you will understand step by step how to integrate Scytale with Jamf Pro - Blueprints

Jamf Pro is an Apple device management solution. This integration extends Jamf Pro to verify policies managed through Blueprints, which configure and deploy device settings in Jamf Pro.

Required Permissions

  • read: blueprints

  • read: declarations

Scytale follows the least-privilege principle, limiting permission scopes strictly to what's required for reliable audit evidence collection.

How to Connect

  1. In Scytale, go to 'Integrations'.

  2. Search for Jamf Pro - Blueprints and select 'Connect'.

  3. Paste your client ID & client secret & region & environment ID.

  4. Add a connection name — this will be used to differentiate between your connections — and then select 'Connect'.

You have now successfully connected to Jamf Pro - Blueprints.

How to Generate Credentials in Jamf Pro - Blueprints

  1. Ensure the tenant is on cloud-hosted Jamf Pro 11.15+:

    1. Go to your Jamf account and click Solutions on the left side bar.

    2. Click on Jamf Pro’s View details

    3. Review the version number

  2. Ensure the tenant has Jamf Account / OIDC login enabled:

  3. Confirm a platform environment exists in Jamf Account and contains the Jamf Pro tenant.

    1. Go to Jamf Account -> Platform environments.

    2. Click on the environment that contains the Jamf Pro tenant.

    3. Note the environment ID, copy it for later.

    Jamf auto-groups most organizations' tenants into one environment; where it has not, one must be created in Jamf Account -> Platform environments. Grouping tenants cannot be undone, so this is an account-owner decision rather than an engineering one.

  4. Create an integration (a user with Administrator or a custom role with Integrations privileges) :

    1. Go to your Jamf account and click Integrations on the left side bar

    2. Click on Create integration

    3. Set Name and Description

    4. Choose Scope level: Platform environment,
      Select Region (us / eu / apac) on the top right (of the target Tenant), and select the environment that contains the Jamf Pro tenant.

    5. Set Permissions, and click Create:

  5. Copy the client_id, generate and copy the client_secret (shown only once).

  6. From the Integration details panel, click “Level details”, and copy the environment ID.

Did this answer your question?