What's new in Jamf Pro 11.20

The Jamf Pro 11.20 release provides compatibility for Apple’s operating systems (based on testing with Apple’s latest betas), Return to Service enhancements and support for Simplified Setup for Platform SSO.

Note: This blog has been updated on September 15 to reflect that Jamf officially supports Apple’s latest operating systems.

Release snapshot

• Compatibility support for Apple’s operating systems
• Supports new declarations in macOS 26
• Simple setup for Platform SSO
• Configuration profile support for new restrictions, skip keys and network relay payloads
• Return to Service app preservation

Compatibility support for Apple operating systems

Apple is different. Each year, Apple releases a new operating system (OS) for its major platforms: macOS, iOS, iPadOS, tvOS, visionOS and watchOS. This year, each platform has the moniker of 26, simplifying versioning for IT teams and end users alike. macOS continues its tradition of naming versions after landmarks in California, with this release called macOS 26 Tahoe.

Jamf is pleased to announce that Jamf Pro has compatibility support for each OS, based on testing with the latest Apple betas. This means IT admins can upgrade their devices to test the latest Apple operating system in their environment without breaking workflows in Jamf Pro.
Jamf Pro 11.20 is compatible with the following operating systems:

• macOS 26 Tahoe
• iOS 26
• iPadOS 26
• tvOS 26
• visionOS 26
• WatchOS 26

Simple setup for platform SSO

Jamf supports the new Platform Single Sign-On workflow on macOS devices. This workflow allows Mac admins to configure a Platform SSO app to be delivered during the Setup Assistant. With this workflow, end users can more easily connect to company resources when they turn on their Mac for the first time. After a successful sign-in, SSO provides authenticated enrollment into the local Mac account and organizational resources. If federated to the same identity provider, a user will be signed in to their Managed Apple Account without having to enter credentials again.

An important note: To fully implement this workflow and allow users to authenticate Mac, identity providers must support Simple Setup for Platform SSO.

Skip Setup Assistant steps

Apple's Automated Device Enrollment, also known as zero-touch deployment, immediately enrolls and configures a device when a user turns it on for the first time, no IT help required. This workflow gets users onto their new device and productive quickly. Unboxing any new Apple device — for personal or professional use — comes with the Setup Assistant, allowing users to customize their devices to their preferences.

Many organizations want to customize that workflow for their users. With this release, IT admins can choose to not display the following panes for computers and mobile devices:

• Multitasking (iOS 26 or later)
• OSShowcase (iOS 26 or later)
• AdditionalPrivacySettings (macOS 26 or later)

New computer and mobile device restrictions

Jamf Pro 11.20 includes new ways to manage Apple features via a computer or mobile device configuration profile. With this release, IT admins can restrict:

• Safari history clearing
• Private browsing
• Block specific ICCIDs

ICCIDs are unique numerical codes that identify a SIM card in a mobile device. This means organizations get more control over messaging services.

Network Relay payloads

Network Relay is a next-generation remote access solution that delivers pervasive connectivity via MDM and is invisible to the end user. Jamf’s Network Relay service is built on Apple’s native support for Multiplexed Application Substrate over QUIC Encryption (MASQUE) and Managed Device Attestation (MDA), and integrated with Jamf’s conditional access engine.

With the release of Jamf Pro 11.20, Jamf supports additional keys deployed as configuration profiles:

• dnsOverHTTPSURL
• syntheticDNSAnswerIPv4Prefix
• UIToggleEnabled

The key syntheticDNSAnswerIPv4Prefix allows for additional browsers such as Google Chrome, Firefox or Edge to be used with Network Relay. The UIToggleEnabled key prevents end users from turning the service off. This is important for highly regulated industries.

Return to Service enhancements

Return to Service completely automates resetting and re-enrolling devices into MDM. It removes the need for users to select the language, region and Wi-Fi profile during Setup Assistant. Not having to select a Wi-Fi profile is critical, since a Wi-Fi profile is required to activate the device. Return to Service is often applicable for organizations in retail, healthcare, and education.

Return to Service now works on iOS, iPadOS and — with the Jamf Pro 11.20 release — visionOS devices.

On devices with iOS, iPadOS and visionOS 26 or later, Return to Service can also preserve managed apps. The Return to Service workflow will securely erase user data; however, app binaries remain to speed the process even more.

For healthcare organizations using Healthcare Listener in Jamf Pro, you can send a wipe demand and return it to service.

To read about all of the updates for the Jamf Pro 11.20 release, visit the release notes.