Skip to main content
Jamf Nation, hosted by Jamf, is a knowledgeable community of Apple-focused admins and Jamf users. Join us in person at the ninth annual Jamf Nation User Conference (JNUC) this November for three days of learning, laughter and IT love.

User Extension Attributes linked to LDAP

It would be helpful to have User Extension Attributes linked to LDAP in the same way Mobile Device Extension Attributes are. Smart User Groups could then be created based on the LDAP attribute.

Comment
Order by:

Posted: by kauppila

I agree. One of the recommendations with Apple School Manager is to create an extension attribute for the student ID #, so that you can sync properly with your SIS via ASM. If the Extension Attribute was able to be populated from LDAP, then that would make my job that much easier.

Like

Posted: by milesleacy

I would like to see this as I'm moving toward user-based scoping of many management items, including policies and configuration profiles for computers.

Like

Posted: by cbrewer

I have also recently come up against this issue. For specifying User Image locations, it would be really nice to use a User extension attribute that I could populate from LDAP. User image locations don't work with mobile device extension attributes.

Like

Posted: by luke.reagor

This would be great! Especially since adding user extension attributes via api doesn't work right now!

Like

Posted: by mlavine

This would be very helpful in keeping a user's info up to date without relying on a Mac checking in to pull the data.

Like

Posted: by prbsparx

I'm hoping this functionality will be included in Jamf Pro 10.

Right now, we're having to store info in other fields, and just train technicians that phone number isn't actually the user's phone number...

Like

Posted: by prbsparx

Unfortunately, this does not exist in Jamf Pro 10. Still hoping to get this added.

Like

Posted: by cdenesha

It is definitely needed so User data can properly be associated with Users.

Like

Posted: by plocklin

This is a need especially if you are managing a school, where user's status and needs change on a yearly basis.

Like

Posted: by prbsparx

This seems like it would take no time at all since they have this built for mobile devices and that requires a lot more work than adding an additional field to users...

Like

Posted: by epeterson

I agree that this could simplify user management. If we could pull information from LDAP to allow us to identify the grade level of the user, we could assign different content to each grade level, and we could also remove the records of the graduating class en-mass, so that we don't have stale records eating up licenses.

Like

Posted: by japodaca

👍👍👍 This needs to be added in future releases

Like

Posted: by dstocking

Now that Okta has offered a production ready LDAP Interface (https://help.okta.com/en/prod/Content/Topics/Directory/LDAP_Using_the_LDAP_Interface.htm), This would be a killer feature to introduce!

Like