the Apple 17.0.0.0/8 block over TCP ports 5223 and 443 from all client networks.įor more information about these ports, see the following articles:.To allow APNS to function correctly on the network, you must also enable outgoing connections to, and redirects from: Apple: Ports 2195, 2196, and 5223 (push notifications to Intune).The following ports should be accessible for Jamf and Intune to integrate correctly: macOS devices with OS X 10.12 Yosemite or later.

A user with Microsoft Intune Integration privileges in Jamf Pro.Global admin role in Azure Active Directory.Microsoft Intune and Microsoft AAD Premium P1 licenses (recommended Microsoft Enterprise Mobility + Security license bundle).You need the following to configure Conditional Access with Jamf Pro:

The Cloud Connector automates many of the steps that are required when you manually configure integration.Īfter you configure integration, you'll then configure Jamf and Intune to enforce compliance with Conditional Access on devices managed by Jamf. Instead of manually configuring Jamf Pro integration with Intune, we recommend configuring and using the Jamf Cloud Connector with Microsoft Intune. This article can help you manually integrate Jamf Pro with Intune. Devices that are compliant with the Conditional Access policies can gain access to protected company resources. Intune's analysis is combined with intelligence about the device user's Azure AD identity to drive enforcement through Conditional Access. Intune's compliance engine then analyzes the inventory data to generate a report. When Jamf Pro integrates with Intune, you can sync the inventory data from macOS devices with Intune, through Azure AD. Resource access is controlled by your Azure Active Directory (Azure AD) Conditional Access policies in the same way as for devices managed through Intune. Through integration, you can require that your macOS devices that are managed by Jamf Pro meet your Intune device compliance requirements before those devices are allowed to access your organization's resources. Intune supports integrating your Jamf Pro deployment to bring device compliance and Conditional Access policies to your macOS devices.

What is jamf pro