Skip to main content

​
Overview

The Jamf integration enables ThreatAware to collect device inventory and compliance data from your Jamf Pro deployment, providing visibility into macOS and iOS device posture across your organisation.
Connection Method: API Setup Time: 20 minutes Access Required: Jamf Pro Administrator account

​
Data collected

The Jamf integration provides:
  • macOS and iOS device inventory
  • Device compliance status
  • Mobile device management (MDM) data
  • Security group memberships
  • Device configuration data

​
Use cases

Apple Device Inventory

Maintain comprehensive inventory of macOS and iOS devices

Compliance Monitoring

Track device compliance with security policies

MDM Status

Monitor mobile device management enrollment and compliance

Security Posture

Verify Apple devices meet security requirements

​
Setup instructions

1

Log in to Jamf Pro Console

Access the Jamf Pro Console with an administrator account.
2

Navigate to User Account Settings

In the Jamf Pro console:
  • Go to Settings > System Settings > Jamf Pro User Accounts & Groups
  • This is where you’ll create an API account
3

Create an API Account

Click New to create a new user account for API access.
  • Enter a descriptive name (e.g., “ThreatAware API User”)
  • Assign Read-only permissions or specific permissions required for ThreatAware
  • Ensure the account has access to device inventory data
Only grant the minimum permissions necessary. Read-only access is recommended for ThreatAware integration.
4

Copy API Account Credentials

After creating the API account:
  • Copy the Username for the API account
  • Copy the Password you assigned
  • Note the Jamf Pro URL for your instance
5

Enable Basic Authentication

Ensure Basic Authentication is enabled for API access:
  • In Settings > System Settings, verify API authentication is configured
  • Confirm the API account has Basic Authentication enabled if required
6

Enter Credentials in ThreatAware

In ThreatAware:
  • Navigate to Settings > Integrations
  • Search for and select Jamf
  • Enter the required credentials:
    • Username: API account username
    • Password: API account password
    • Jamf Pro URL: Your Jamf Pro instance URL
7

Connect and Verify

Click Connect to establish the integration.Verify the connection status shows Active in ThreatAware.

​
Required credentials

Field Name: Jamf API Username Type: String Description: The username of the Jamf API accountExample: threataware-api or svc_threataware
Field Name: Jamf API Password Type: Password (encrypted) Description: The password for the Jamf API account
Store this credential securely in your organisation’s password manager for future reference.
Field Name: Jamf URL Type: String Description: The URL of your Jamf Pro instanceFormat: https://your-jamf-url.com Example: https://jamf.acme.com or https://jamfpro.company.net

​
Verification and testing

After setup, verify the integration is working correctly:
  1. Check Integration Status
    • Navigate to Settings > Integrations in ThreatAware
    • Confirm the Jamf integration shows Active status
  2. Verify Data Collection
    • Wait up to 1 hour for the initial data sync
    • Check that Jamf device data appears in your inventory
    • Verify macOS and iOS device counts match your Jamf environment
  3. Test Queries
    • Create a test query to filter devices by Jamf management status
    • Verify device data matches your Jamf environment
    • Test filtering by compliance or security group

​
Troubleshooting

Symptoms: Connection fails with authentication errorSolutions:
  • Verify the Username and Password are entered correctly
  • Ensure API access is enabled for the user account in Jamf
  • Check that the user account is not locked or disabled
  • Confirm the password was entered without extra spaces
  • Test the credentials by logging into Jamf Pro directly with the account
Symptoms: Integration fails to connect or times outSolutions:
  • Verify the Jamf Pro URL is correct and accessible
  • Check firewall rules allow outbound HTTPS (443) to your Jamf instance
  • Test the URL in a browser to ensure it’s reachable
  • Verify your Jamf Pro server is online and responding
Symptoms: Integration connects but returns permission denied errorsSolutions:
  • Verify the API account has read permissions to device inventory
  • Check the account permissions include access to all device groups
  • Review the Jamf API Documentation for required permissions
  • Ensure the account has permissions across all required areas
Symptoms: Integration shows active but no Jamf data appearsSolutions:
  • Verify there is device data in Jamf to collect
  • Check the API account permissions for data access
  • Verify devices are enrolled and managed in Jamf Pro
  • Review ThreatAware integration logs for errors
  • Contact Jamf support if data collection issues persist

​
Additional resources

Jamf API Documentation

Official Jamf API documentation for detailed configuration and permissions

ThreatAware Support

Contact ThreatAware support for integration assistance

​
Best practices

Credential Management
  • Create a dedicated API account specifically for ThreatAware
  • Store credentials securely in your organisation’s password manager
  • Rotate API credentials annually or per your security policy
  • Monitor for authentication failures in ThreatAware logs
Security Considerations
  • Only grant read-only permissions (never write access)
  • Limit the API account scope to necessary device groups
  • Review Jamf audit logs periodically to monitor API usage
  • Follow your organisation’s least privilege principles