Jamf

You can configure SysTrack's integration with the Jamf REST API to collect a limited set of inventory data for mobile iOS devices.

NOTE: Before the Jamf integration can collect any data, the SysTrack iOS agent must be installed and currently running on your mobile devices. Simply having the agent running on the device (without configuring this Jamf integration) enables you to collect the data specified in the iOS column in all Supported Features tables. Then, if you configure the Jamf integration, you can collect a limited set of additional data, which is specified in the MDM column of the Supported Features tables.        

Before you follow the steps below, fully set up Jamf so that your managed devices and policies are in place. Ensure that you have a Jamf user account with full create, read, update, and delete API Integration access.  Most Jamf Administrator accounts have this API Integration access.

IMPORTANT: For SysTrack 11.2 and after, the Jamf integration can collect user and device data daily for non-mobile macOS devices. This simplifies mapping systems between Jamf and SysTrack, giving you a more complete view of devices and users.        

For macOS devices, the following fields are collected:

• Device Details: Serial Number, Model.

• User Details: Username (required for mapping), Real Name, Email, Position, Department, Phone Number.

To ensure accurate mapping, each device in Jamf must have an assigned Username.

Optional: Package and Deploy the SysTrack macOS Agent with Jamf

If you use Jamf to deploy SysTrack to macOS devices, complete this workflow before configuring the Jamf integration in SysTrack. This section covers packaging and deployment only. The SysTrack Configure steps are in the next section.

The following example shows how you can create a package for deployment through Jamf.

Create a working directory

1. Open Terminal and create a working directory.

2. Place your .pkg installer and .cfg configuration file in this directory.

For example:

mkdir -p ~/Desktop/PackageBuild
cd ~/Desktop/PackageBuild

Create a payload folder

1. Create a new folder inside the working directory to store the files.

2. Move the .pkg installer and .cfg configuration file into this folder.

For example:

mkdir -p Payload/Library/Application\ Support/MyApp
mv MySoftware.pkg Payload/Library/Application\ Support/MyApp/
mv MyConfig.cfg Payload/Library/Application\ Support/MyApp/

Set the correct permissions for the files:

sudo chown -R root:wheel Payload
sudo chmod -R 755 Payload

Build the package

Use the pkgbuild command to create the package installer.

pkgbuild --root Payload --identifier com.mycompany.myapp --version 1.0 --install-location /Library/Application\ Support/MyApp MyFinalPackage.pkg

Test the package

Before deploying, test the package by installing it locally.

sudo installer -pkg MyFinalPackage.pkg -target /

Upload the package to Jamf Pro

1. Log in to Jamf Pro.

2. Go to Settings > Computer Management > Packages.

3. Upload MyFinalPackage.pkg.

4. Deploy it through Policies or PreStage Enrollment.

5. Make sure that the correct permissions are set.

You can also follow Jamf's instructions for creating a package to deploy.

To deploy SysTrack, you must be able to create a .pkg file that includes both Install-SysTrack.pkg and the configuration file in the same directory. Then have Jamf run a post-install script to silently install Install-SysTrack.pkg and run the lsiagentctl script.

These instructions assume base knowledge of macOS and package creation. If you need help building the package, you can use the composer within Jamf to build your package.

After the SysTrack agent is installed and running on your macOS devices, continue with the SysTrack configuration steps below to enable Jamf data collection in SysTrack.

Jamf Data Collection Frequency

SysTrack collects data from Jamf every 12 hours, increased from the previous 24-hour interval. This improves the accuracy and timeliness of identity-related sensors, such as password expiration tracking, for more proactive IT response.

Configure the Integration

To configure the Jamf options in SysTrack Configure, follow these steps:

1. Make sure that you are signed in as a user with rights to modify settings in SysTrack Configure.

2. Select Integrations from the left menu.

3. Select the Lock icon in the upper right so that you can edit the page.

4. Select the Unified Endpoint Management tab, select the Edit icon next to JAMF, and enter the following information:

   • JAMF URL: Enter the base URL for the Jamf Pro API.  Usually this is the Jamf server URL followed by /api.

   • User ID: Enter the username for your Jamf account that has API Integration access.

   • Password: Enter your Jamf account password.

     

5. Select OK, and then select Save Changes.

6. Select the open Lock icon to end your editing session.

    SysTrack now queries Jamf for devices, which will show up on the Assignments page within five minutes.

TIP: To learn more about Jamf, see Jamf's documentation.