Skip to main content
Jamf Nation, hosted by Jamf, is the largest Apple IT management community in the world. Dialog with your fellow IT professionals, gain insight about Apple device deployments, share best practices and bounce ideas off each other. Join the conversation.

Manually Deploying Jamf Self Service for iOS

Overview

This article explains how to manually deploy Jamf Self Service to iOS devices. It can be used in addition to manually deploying the Self Service web clip.

Note: For information about manually deploying the Self Service web clip, see the Customizing the Self Service Web Clip Icon Knowledge Base article.

Versions Affected

Jamf Pro 9.4 or later

Requirements

Self Service 10.5.0 or later requires mobile devices with iOS 10 or later.

For instructions on installing Jamf Self Service on mobile devices with iOS 9 or earlier, see Installing Self Service on Mobile Devices in the Jamf Pro Administrator's Guide.

Procedures

  1. Log in to Jamf Pro with a web browser.
  2. In the top-right corner of the page, click Settings.
  3. Click Self Service.
  4. Click iOS.
  5. Click Edit.
  6. On the General pane, choose “Neither (manual installation)” from the Install Automatically pop-up menu.
  7. (Optional) Click the App Options tab and configure the preferences as needed.
  8. Click Save.
  9. Click Mobile Devices at the top of the page.
  10. Click Mobile Device Apps.
  11. Click New (+).
  12. Select App Store app and click Next.
  13. Add Jamf Self Service from the App Store catalog.
  14. On the General pane, select "Install Automatically/Prompt Users to Install" from the Distribution Method pop-up menu, and configure any additional settings.
  15. Click the Scope tab and configure the scope of the app.
  16. On the App Configuration pane, add the following lines to the Preferences field and specify the Jamf Pro URL. <dict> <key>INVITATION_STRING</key> <string>$MOBILEDEVICEAPPINVITE</string> <key>JSS_ID</key> <string>$JSSID</string> <key>SERIAL_NUMBER</key> <string>$SERIALNUMBER</string> <key>DEVICE_NAME</key> <string>$DEVICENAME</string> <key>MAC_ADDRESS</key> <string>$MACADDRESS</string> <key>UDID</key> <string>$UDID</string>      <key>JSS_URL</key>      <string>https://instancename.jamfcloud.com/</string> </dict>
  17. Click Save.

Jamf Self Service is distributed to mobile devices in the scope the next time they contact Jamf Pro.

  • A video walkthrough of Manually Deploying Jamf Self Service for iOS can be found here.
Like Comment
Order by:
SOLVED Posted: by tomhastings

Deployment went smooth to my test iPad but when I launch the App I get an error \- "Unable to connect to server."
I triple checked the server address and it is correct. Any ideas?

Like
SOLVED Posted: by A.Anderegg

I had the same problem tomhastings, then I inserted the JSS url into the last line as well and it worked. <string>https://mycompany.com:8443/</string>

Like
SOLVED Posted: by dudavis

When following step #6:

On the General pane, choose “Neither (manual installation)” from the Install Automatically pop-up menu.

Will self-service be removed from the device at the next check-in? If self-service is removed, apps installed through self-service should remain, right?

Like
SOLVED Posted: by bcampbell

Removing Self Service has no effect on apps previously installed using it.

Like
SOLVED Posted: by jsallen77

I can't get this to work. I have followed the steps listed above with limited success.

One difference that tech support has pointed out and I don't see documented anywhere is when using a hosted JSS, you don't need to specify the port in the URL. Even after removing the port, I am still having issues. Self Service Mobile will install without prompting for an Apple ID, however I am then presented with an error indicating, "The Required managed settings were not received from the server."

Anyone else using a Hosted Instance of JSS having this problem?

Update: Deleting and readding the app to JAMF fixed the issue. The information about the port and cloud hosted JSS still applies.

Like
SOLVED Posted: by wilersh

I am still getting prompted to sign into an Apple ID to install the app. Any other suggestions on making this work?

Thanks!

Eric

Like
SOLVED Posted: by Vlad

Trying to deploy Self Service with JSS 9.81 and iOS 9.x without having to login or use apple id. No luck, does anybody ever got the idea how to do that?

Like
SOLVED Posted: by tobiaslinder

Hi Vlad
You will always need an Apple ID to install an App Store App. Even if you would distribute the IPA file as an In-House App you will have to activate the Apple ID once on the device either before you install the App or while launching it the first time.

If you don't want to use an Apple ID on the device you have two option:

  1. distribute it with VPP device assignment
  2. use the Self Service WebClip
Like
SOLVED Posted: by E-Man

Eric,

An oversight that has caught me several times is the iOS. Are the iPads that are prompting for sign in at least up to iOS 9? If not you will get a prompt to sign in to with Apple ID every time on every app even if you have purchased the app with Managed Distribution license (Device assigned VPP).

Like
SOLVED Posted: by STVEscott

No port on URL for hosted worked for me once I reinstalled the SelfService App.

Like
SOLVED Posted: by stwrz

Are these still the most current instructions? I try the app configuration above with my URL, and when Self Service loads onto the iPad, I'm greeted with a grey screen prompting to see my administrator... which is me.

Like
SOLVED Posted: by nkoval

@Vlad To get self service to deploy without an AppleID you need to do the following:
1. Under Settings > Mobile Device Management > Self Service, choose "Neither (Manual Installation)" from the Install Automatically Pop-Up Menu
2. Make sure that you have purchased Self-Service Mobile as a Managed License from deploy.apple.com
3. Under the Mobile Devices > Apps > Self Service Mobile configure as follows:
- General: Distribution Method: Automatically Update / Prompt User to install
- Scope: Assign to all mobile devices
- VPP: Check the box "Assign VPP Content"

You should be able to verify that the App is being pushed to the device using the Management Tab under the Mobile Devices Record.

Like
SOLVED Posted: by aporlebeke

Thanks @nkoval that worked for us. I was getting really tired of having some of our iPads not receiving or downloading the Self Service app from our JSS automatically. This is definitely how we're going to distribute Self Service for mobile devices moving forward.

Like
SOLVED Posted: by CairoJXP

Does anyone have a preference between the web clip and mobile version? What do you find to be the pros and cons? We use the web clip and when I switched to the mobile at one point, it caused a bunch of issues, so I switched back to the web clip.

When choosing "neither" as well, I assume it doesn't auto-install like the web clip, but that the user is prompted to install it kind of like the VPP Invitation that goes out. Auto install would be ideal which is why we use the web clip.

Like
SOLVED Posted: by cdenesha

My issues with the web clip are primarily with its inability to update apps (defects which have been open for an extremely long time). Our younger grades have a disabled app store so I can't configure updates this way. (Hopefully the force app update feature is truly fixed with iOS 9.3 and JSS 9.90)

A bonus of the Mobile app is the ability to Categorize apps, and the search functionality for students so they don't have to find the correct category. It is also supposed to open up another method of communication with Notifications but I couldn't get it to work the way I wanted when it first came out and never had time to test it again (didn't seem to be using APN so only worked when the app was open - I think this may be fixed or perhaps I didn't have the student signed in or something).

In my new district we sit all students down to onboard and configure, and Self Service Mobile tries to install as soon as the device is in scope. Once it fails you have to resend the push from Casper - awkward to impossible. However I'm going to be testing the device based app assignment for this next year's deployment so maybe we can finally use it.

When you choose 'Neither' there is no prompt or auto-install. But if you scope it to all devices or perhaps to all devices signed into iTunes (they'll be signed in with an Apple ID so hopefully licensing is no longer an issue) it becomes automatic again.

chris

Like
SOLVED Posted: by cdenesha

Oh yes - the Mobile app also can look for iBeacons.

If you wanted to experiment with configuration profiles that turned on and off with them, here are some links for further reading. I never pursued it because 1) I didn't have money to purchase and my teachers don't all have Macs that can be used for it, and 2) I can't enforce BlueTooth to be on.

iBeacon Limitations
Beacons...
Beacon Support in Self Service

Like
SOLVED Posted: by Sandy

We used the Self Service WebClip initially during rollout in the fall because it came down fast and did not rely on getting Apple IDs and App Store going to get Mail profile we put into Self Service
Now with Device Based Management we use that to roll it out, and the current version works well. it looks nicer and is a bit more intuitive for Middle Schoolers who often did not notice the tabs at the bottom of the WebClip.
Also we are at JSS 9.8.2 but Self Service Mobile auto-updated to 9.9 and works fine.

Like
SOLVED Posted: by cdenesha

Thank you @Sandy for the real world experience. :)

Like
SOLVED Posted: by m.green

The string above worked for us so far. @jsallen77 We are a hosted solution, I typed in our cloud with a "/" after .com.

e.g. https://ourdomain.jamfcloud.com/

Like
SOLVED Posted: by MengKuan

This configuration not working. Anyway to get it work beside this?

Like
SOLVED Posted: by tobiaslinder

Hi @alpha82 This configuration is working with many of my clients. So if it doesn't work for you then there must be an error in your setup. I could contact jamf support to dig deeper.

Like
SOLVED Posted: by RLR

Just set this up and worked straight away. Only needed to change url in preferences.

Like
SOLVED Posted: by ipekshev

Great article! Thanks!

Like
SOLVED Posted: by penairefb

Got this to work for our devices. I followed the instructions above, and added Self Service to our VPP with automatic installation selected and "assign VPP content" selected. I added the string above in app configuration. Since we're using a hosted instance, I removed the port from the JSS URL to read as follows <string>https://mycompany.com/</string>g>ing> This worked like a charm for us. Self Service is installed without any server errors like we had before.

Like
SOLVED Posted: by cory.hardman

Got this working without an issue by adding our JSS hosted URL using <string>https://mycompany.com/</string>g>ing>. Super simple.

Like
SOLVED Posted: by stevenjklein

Thanks, @STVEscott. I was stuck, but after removing the :8443 from my server URL, it started working.

Just to make it more explicit for anyone else needing help with this, here's what I changed:

old: https://mycompany.com:8443/

new: https://mycompany.com/

Like
SOLVED Posted: by Bedfords

I have tried everything and Self Service will not load on any of our iPads

Like
SOLVED Posted: by dvasquez

So one note is even in the video I saw at the end they use this in the edit of their XML file:

<string>https://mycompany.com/</string>

This is a nice piece of information and confusing as it is not in the initial process above.

Second I had to, after the purchase and edit of the app config, remove the self-service app from a scope. This removes it from the mobile devices it was initially pushed to and scoped to. Then a re-scope and push of the self-service app worked like a dream. Doing this also cleared up a "Self Service cannot connect to the server" error I was seeing over and over again.

I read this here: https://www.jamf.com/jamf-nation/discussions/26799/self-service-unable-to-connect-to-server

I will also say our JSS is hosted and this was my first deployment to iPads. So my process was much easier than some in this thread. Still, the self-service app is installing as expected to scoped iPads. I hope this helps someone.

Like