> For the complete documentation index, see [llms.txt](https://docs.sprinto.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sprinto.com/integrations/overview/jamf-integration.md).

# Jamf Integration (Staff Device Management)

Jamf integration enables Sprinto to monitor managed Apple devices for compliance and security controls.

By connecting Jamf with Sprinto, you can:

* Automate staff device inventory collection
* Monitor encryption status across devices
* Track operating system version and update status
* Detect screen lock configurations
* Verify antivirus installation status
* Associate devices with staff members for monitoring
* Reduce manual evidence collection for device-related controls

Sprinto integrates with Jamf using API login credentials.

***

### How Jamf Integration Works

Sprinto connects to Jamf through API authentication.

The integration works by:

1. Creating a dedicated Jamf API user
2. Assigning read-only privileges
3. Providing Jamf credentials to Sprinto
4. Authenticating with Jamf APIs
5. Retrieving device inventory and configuration details
6. Continuously syncing device data for compliance monitoring

Sprinto retrieves inventory and configuration profile data to automate controls.

***

#### Sprinto checks for Jamf <a href="#sprinto-checks-for-jamf" id="sprinto-checks-for-jamf"></a>

Following are the checks offered by Sprinto for the Jamf MDM tool:

<table><thead><tr><th width="167.73828125">Sprinto check</th><th>Required action</th></tr></thead><tbody><tr><td>Device OS should be upto date on staff device</td><td><p>The check gets activated against a staff member if their device is running on an outdated operating system (OS) version.</p><p><br>To fix this check, a staff member needs to update the device operating system with the latest available OS version and report the device status using the Jamf MDM tool.</p></td></tr><tr><td>Disk encryption should be enabled on staff device</td><td><p>The check gets activated against a staff member if their device storage is not encrypted.</p><p>To fix this check, a staff member needs to enable encryption on their device storage and report the device status using the Jamf MDM tool.</p></td></tr><tr><td>Antivirus should be running on staff device</td><td>The check gets activated against a staff member if the Jamf MDM tool does not find an antivirus installed on the device.<br><br>To fix this check, a staff member needs to install a valid antivirus on their device and report the device status using the Jamf MDM tool.</td></tr></tbody></table>

***

### Prerequisites

Before connecting Jamf to Sprinto, ensure that:

* You are logged in to the Sprinto Admin portal.
* You have administrator access to Jamf Pro.
* You have access to create Jamf user accounts.
* You have permission to configure Jamf Pro system settings.
* You have a Jamf Pro subscription with API access enabled.

***

### Authentication Method

Jamf integration uses login credentials authentication.

Sprinto authenticates using:

* Jamf domain URL
* Username
* Password

OAuth is not required for this integration.

Sprinto uses a dedicated Jamf API user with read-only access.

***

### Permissions Required

Sprinto requires read-only access to device inventory and security configuration data.

#### Required Permissions

The Jamf user account should have the following permissions.

<table><thead><tr><th width="242.7578125">Permission</th><th width="405.38671875">Purpose</th></tr></thead><tbody><tr><td>Read device inventory</td><td>Retrieves managed devices and hardware details</td></tr><tr><td>Read security settings</td><td>Retrieves encryption, OS, and lock settings</td></tr><tr><td>Read configuration profiles</td><td>Detects device configuration policies</td></tr><tr><td>Read user information</td><td>Maps devices to users</td></tr></tbody></table>

#### Recommended Privilege Set

Sprinto recommends using the following Jamf privilege level:

* **Auditor**

The Auditor role provides read-only access suitable for compliance monitoring.

### Data Accessed by Sprinto

Sprinto syncs read-only metadata from Jamf.

#### Device Inventory Data

Sprinto syncs:

* Device serial number
* Device name
* Device model
* Device ownership mapping
* Assigned user email

#### Security and Compliance Data

Sprinto syncs:

* FileVault encryption status
* Screen lock configuration
* OS version
* OS update status
* Antivirus detection
* Last device check-in timestamp

#### Supported Encryption States

Sprinto may detect the following encryption states:

* `BOOT_ENCRYPTED`
* `ALL_ENCRYPTED`
* Not encrypted

***

### Connect Jamf in Sprinto

To start the integration:

1. Log in to Sprinto.
2. Go to **Settings**.
3. Select **Integrations**.
4. Under the **All** tab, search for **Jamf**.
5. Click **Connect** next to Jamf.

<figure><img src="/files/vvYigV1dd89cfkCnnj3z" alt="" width="563"><figcaption></figcaption></figure>

A drawer opens displaying available Jamf integrations.

### Select Staff Device Management

Jamf provides multiple integration options.

1. In the connection drawer, locate **Staff Device Management**.
2. Click **Connect** next to Staff Device Management.

<figure><img src="/files/hWaEpzIpMEaQZ8eRngqh" alt="" width="375"><figcaption></figcaption></figure>

Sprinto opens a setup drawer containing integration information.

#### Review Integration Information

The drawer displays:

**Automated Evidences**

Sprinto shows:

* Number of automated controls
* Number of automated checks

**Permission & Data**

Sprinto displays required permissions.

**Permissions Required**

* User Information (email address): Read-only
* List Devices: Read-only

**Data Used by Sprinto**

Sprinto may access:

* Device details
* User information
* Hard disk encryption status
* Operating system version

**Additional Information**

Sprinto displays:

* Required subscription plan
* Required administrative access

After reviewing the details, click **Next**.

<figure><img src="/files/13us1sbAxocePgp2oDYb" alt="" width="375"><figcaption></figcaption></figure>

### Create a Jamf API User

Sprinto requires a dedicated Jamf user account with read-only permissions.

To create the Jamf API user:

1. Log in to your Jamf portal.
2. Click the **Settings** icon in the top-right corner.
3. Select **System Settings**.
4. Go to **Jamf Pro User Accounts & Groups**.
5. Click **New**.
6. Select **Create Standard Account**.
7. Click **Next**.

#### Configure User Details

Provide the following information:

<table><thead><tr><th width="159.12890625">Field</th><th width="249.7421875">Value</th></tr></thead><tbody><tr><td>Username</td><td><code>sprinto</code></td></tr><tr><td>Full Name</td><td><code>Sprinto Auditor</code></td></tr><tr><td>Password</td><td>Create a secure password</td></tr><tr><td>Privilege Set</td><td>Auditor</td></tr><tr><td>Access Status</td><td>Enabled</td></tr></tbody></table>

8. Click **Save**.

This creates a read-only Jamf user for Sprinto integration.

### Enter Jamf Credentials in Sprinto

After creating the Jamf API user:

1. Return to Sprinto.
2. Enter the following information:
   * Jamf Domain URL
   * Username
   * Password

#### Required Fields

<table><thead><tr><th width="145.46484375">Field</th><th width="199.55078125">Description</th></tr></thead><tbody><tr><td>Domain</td><td>Jamf instance URL</td></tr><tr><td>Username</td><td>Jamf API username</td></tr><tr><td>Password</td><td>Jamf API password</td></tr></tbody></table>

Example domain:

<https://yourcompany.jamfcloud.com>

### Complete Connection

1. Verify all entered information.
2. Click **Connect to Jamf**.

<figure><img src="/files/uqQ8n5zxTGYKleRIvBuv" alt="" width="375"><figcaption></figcaption></figure>

Sprinto validates the credentials and connects to Jamf.

Once connected, Jamf appears as an active Staff Device Management integration.

***

### APIs Used by Sprinto

Sprinto uses Jamf APIs to retrieve device inventory and configuration details.

#### Authentication API

<table><thead><tr><th width="238.18359375">API Endpoint</th><th width="296.01171875">Purpose</th></tr></thead><tbody><tr><td><code>POST /api/v1/auth/token</code></td><td>Generates API authentication token</td></tr></tbody></table>

#### Device Inventory APIs

<table><thead><tr><th width="415.71484375">API Endpoint</th><th width="302.6796875">Purpose</th></tr></thead><tbody><tr><td><code>GET /api/v1/computers-inventory?page={page}</code></td><td>Retrieves managed devices</td></tr><tr><td><code>GET /api/v1/computers-inventory-detail/{id}</code></td><td>Retrieves detailed device metadata</td></tr></tbody></table>

#### Configuration Profile APIs

<table><thead><tr><th width="487.76171875">API Endpoint</th><th>Purpose</th></tr></thead><tbody><tr><td><code>GET /JSSResource/osxconfigurationprofiles</code></td><td>Retrieves configuration profiles</td></tr><tr><td><code>GET /JSSResource/osxconfigurationprofiles/id/{profileId}</code></td><td>Retrieves profile details</td></tr></tbody></table>

#### User Account API

<table><thead><tr><th width="211.4765625">API Endpoint</th><th width="257.89453125">Purpose</th></tr></thead><tbody><tr><td><code>GET /api/v1/accounts</code></td><td>Retrieves Jamf user accounts</td></tr></tbody></table>

### Synced Data

After integration, Sprinto syncs the following information.

<table><thead><tr><th width="193.8515625">Category</th><th width="384.13671875">Synced Data</th></tr></thead><tbody><tr><td>Device Inventory</td><td>Device name, serial number, model, ownership</td></tr><tr><td>Encryption</td><td>FileVault encryption status</td></tr><tr><td>Device Security</td><td>Screen lock and OS status</td></tr><tr><td>Antivirus</td><td>Installed endpoint security applications</td></tr><tr><td>User Mapping</td><td>Assigned user details</td></tr><tr><td>Device Activity</td><td>Last check-in timestamp</td></tr></tbody></table>

***

### Post Connection Flow

After Jamf is connected:

#### Device Discovery

Sprinto discovers managed devices from Jamf.

#### Device Ownership Mapping

Sprinto maps devices to employees using user metadata.

#### Device Compliance Monitoring

Sprinto continuously checks:

* Encryption state
* Device lock configuration
* Operating system versions
* Antivirus detection

#### Evidence Collection

Sprinto automatically updates controls using synced device data.

#### Periodic Synchronisation

Sprinto periodically syncs data from Jamf to keep monitoring current.

### Sync Frequency

Sprinto refreshes Jamf data periodically.

<table><thead><tr><th width="244.28515625">Data Type</th><th width="179.8125">Sync Frequency</th></tr></thead><tbody><tr><td>Device Inventory</td><td>Every 6–24 hours</td></tr><tr><td>Security Metadata</td><td>Periodic refresh</td></tr><tr><td>Device Ownership Mapping</td><td>Periodic refresh</td></tr></tbody></table>

Sync frequency may vary depending on system configuration.

### Platform Support

Jamf supports Apple device management.

#### Supported Platforms

* macOS
* iOS
* iPadOS

#### Unsupported Platforms

* Windows
* Android
* Linux

***

### Limitations and Considerations

Jamf integration has platform-specific limitations.

#### Known Limitations

* Jamf supports Apple devices only.
* No Windows or Android monitoring support.
* Screen lock detection depends on configuration profile parsing.
* Antivirus detection relies on installed package discovery.

#### Important Considerations.

* Ensure Jamf API credentials remain active.
* Avoid changing privilege levels after setup.
* Keep Jamf credentials updated if passwords rotate.

***

### Troubleshooting

#### Unable to Authenticate With Jamf

Ensure:

* Domain URL is correct.
* Username and password are valid.
* The Jamf account is active.
* API access is enabled.

#### No Devices Are Synced

Ensure:

* Devices are enrolled in Jamf.
* Device inventory is populated.
* Jamf API permissions allow device listing.

#### Missing Encryption or Screen Lock Data

Ensure:

* Devices report configuration profile data.
* FileVault status is available in Jamf.
* Configuration profiles are assigned to devices.

#### Authentication Errors

Ensure:

* Jamf password has not expired.
* The API user has Auditor permissions.
* Jamf tenant URL is correctly entered.

***

### **Support** <a href="#support" id="support"></a>

If you encounter any issues or need assistance with your integration, contact the Sprinto support team at <support@sprinto.com>.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.sprinto.com/integrations/overview/jamf-integration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.