Simplify Apple device management with configuration profiles via blueprints

Jamf is redefining configuration profile management by building on Jamf Pro’s blueprint foundation. Configuration profiles, a critical component to establishing and enforcing compliance, are widely used across Mobile Device Management (MDM) solutions. With keys added or deprecated with each OS update, they are constantly evolving to best support newly released Apple hardware and software features. In short, they are an essential requirement for organizations that need to manage their devices with same-day support for the latest and greatest from Apple.

Device management made easy for all

By making configuration profiles a blueprint component, Jamf offers enterprises an easy, scalable way to adopt, manage and support new keys faster. This release reduces the barrier of entry for all IT – from seasoned Mac admins to those new to Apple management – it’s ease of use helps teams to streamline deployments while ensuring that devices are configured precisely and consistently across your Apple ecosystem.

Taking the "action" out of transactional work

Our goal with this release is to deliver a streamlined and scalable solution that eliminates manual, transactional work often associated with managing hundreds, thousands or tens of thousands of devices. And because of the tight integration between Apple’s management and security frameworks and Jamf’s solutions, this approach enables admins to:

• Unlock time-saving workflows that automatically
• Keep organizational and device security postures strong
• Enforce business and regulatory compliance requirements
• Support continuous delivery of each key in Apple’s MDM Framework

IT just works

Jamf actively monitors Apple’s GitHub repository for updates, translates and validates those changes and dynamically generates a UI for each key.

The best part? This entire process happens outside of Jamf’s standard release cycle, enabling sooner-than-same-day support for the latest Apple technology – giving admins the tools they need to update on their timeframe, not ours.

What this means for admins

Configuration profiles are deployed automatically via blueprints, not only simplifying settings management, but giving admins more control over the keys that matter most. This means that admins no longer need to worry about undesired settings getting deployed or uploading a custom payload as a workaround.

Furthermore, it works in concert with the declarative framework, ensuring admins that managed devices stay in the desired state of compliance. Admins can also take advantage of new payloads and keys not yet supported by selecting them as a component with blueprints to deploy when available.

Traditionally, admins combine declarative and manual configuration settings in a single, streamlined workflow. But with configuration profiles via blueprints, admins granularly set permissions for all payloads. This results in:

• Enhanced control over the macOS restrictions payload
• A consistent, unified experience across Jamf Pro
• Streamlined reporting and search capabilities for individual settings

Guidance for our customers

Currently deploying configuration profiles, the manual way? Learn what happens to existing profiles and how to migrate to blueprint-based configurations to take advantage of the latest functionality.

Configuring Single Sign-On (SSO) in Jamf Account

Admins must have SSO with OIDC configured in Jamf Account to configure and deploy configuration profiles via blueprints successfully. This is necessary because the platform service operates independently from the main Jamf Pro instance. Configuring SSO ensures that:

• Data remains securely within the organization’s boundaries
• Features can be updated independently of Jamf Pro release cycles
• Same-day support and rapid feature iteration are possible

This setup not only provides a seamless and secure login experience across supported Jamf products, including Jamf Pro, Jamf Protect, Jamf Security Cloud and Jamf Account, but also enables your organization to benefit from current and future platform innovations.

Fast, flexible and future-ready

Our streamlined, scalable solution reduces the administrative overhead needed to support Apple’s fast-moving updates manually. By aligning our solutions with Apple’s innovations, organizations gain the tools to adopt new OS versions and features, as well as support new hardware same-day while empowering IT and organizations with the flexibility to confidently manage and secure their Apple ecosystem.