> For the complete documentation index, see [llms.txt](https://docs.siit.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.siit.io/guides/integrations/integrations-mdm/jamf-integration.md).

# Connect Jamf

Connect Jamf to Siit with your Jamf URL, client ID and client secret from an API role, to sync equipment per employee and run actions like device lock from Siit

### What benefits does the integration offer?

* **Full Equipment Sync (🔄):** Siit synchronizes all equipment, associating them with employees for comprehensive visibility into the devices assigned to each employee.
* **Quick Actions Capability (🚀):** Siit enables IT professionals to trigger Jamf actions, such as locking or unlocking devices, or resetting passwords directly from the Siit interface.

### How to set up Jamf integration?

The process of connecting Siit with Jamf MDM is straightforward. Follow these steps:

* Navigate to **Settings → Workspace → Integration library**.
* Search for and click on "Connect Jamf Integration."

​

<figure><img src="https://2274035325-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FlWFhpq2ia6gdHet0opKx%2Fuploads%2Fgit-blob-9faf0b602bb73d8fc13ed00bdfb6fcb70c3dd64b%2FCleanShot-2023-11-15-at-18.11.48.png?alt=media" alt=""><figcaption></figcaption></figure>

* Fill in the following:
  * Jamf URL
  * Client ID
  * Client Secret

To find this information:

* You will need to go to your Jamf dashboard. In the Jamf dashboard, go to Settings and search for "API Roles & Clients."

Click on "New API Roles" and grant the following permissions:

* Read User Extension Attributes
* Read Computers
* Read User
* Read Buildings
* Send Computer Remote Lock Command
* Read Mobile Devices
* Send Mobile Device Remote Lock Command
* Send Computer Unlock User Account Command
* View Disk Encryption Recovery Key
* View Recovery Lock
* Create Webhooks
* Delete Webhooks

<figure><img src="https://2274035325-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FlWFhpq2ia6gdHet0opKx%2Fuploads%2Fgit-blob-35af3f3eabc3100b008560b30e87c265c3eda5ec%2FCleanShot-2023-11-15-at-18.13.24.png?alt=media" alt=""><figcaption></figcaption></figure>

* After creating API roles, go to API Client, click on "New," select the API roles created, and enable the API client.\
  ​

<figure><img src="https://2274035325-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FlWFhpq2ia6gdHet0opKx%2Fuploads%2Fgit-blob-17bedfc2634119d1678830c504759dfe8b061f9d%2FCleanShot-2023-11-15-at-18.14.21.png?alt=media" alt=""><figcaption></figcaption></figure>

* Copy and paste all the information into Siit and click on "Configure".

After completing these steps, the integration will work seamlessly.

All equipment will be synchronized, providing full visibility on equipment per employee. Additionally, in request conversations, you will be able to execute quick actions like locking devices, recovering passwords, retrieving recovery keys, and unlocking user accounts.

​

<figure><img src="https://2274035325-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FlWFhpq2ia6gdHet0opKx%2Fuploads%2Fgit-blob-d4aaa083c95a43ebfa10c0bc1e96bb32778716b2%2FCleanShot-2023-11-15-at-18.14.53.png?alt=media" alt=""><figcaption></figcaption></figure>

### Can I run Jamf actions in a workflow?

Yes. Workflows can lock a device, unlock a user account, add a device to static groups or remove it from them, and send the recovery key or Recovery Lock password privately to the requester. See [Run device actions from a workflow](/guides/workflows/run-device-actions-from-a-workflow.md).

If you encounter any technical issues, our dedicated support team is here to assist you. Feel free to reach out to us via email at <support@siit.io> or contact your assigned Customer Success Manager for personalized assistance.

We're committed to ensuring a smooth experience with the Siit & Jamf MDM integration and are ready to support you every step of the way.

**What you'll see synced automatically**

* **Office location**: Siit maps office location from Jamf automatically, resolved from the buildings your integration already syncs, so there's no extra setup needed.
* **Status follows the owner**: assigning an owner to a spare device moves its status to "In service" automatically, unless you changed the status in the same edit.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.siit.io/guides/integrations/integrations-mdm/jamf-integration.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.