Jamf Connect Login (Okta)

com.jamf.connect.login

Jamf Connect Login settings

macOS

Configuration Keys (42)

Showing 42 of 42 keys

Key	Type	Description	Default	Range
`AuthServer`string	string	—	Default: —	Range: —
`LicenseFile`data	data	—	Default: —	Range: —
`PFC_SegmentedControl_0`string required	string	—	Default: —	Range: —
`DenyLocal`boolean	boolean	Determines if users can bypass network authentication and use the Local Auth button at the loginwindow.	Default: —	Range: —
`DenyLocalExcluded`array	array	—	Default: —	Range: —
string Username	string	—	Default: —	Range: —
`LocalFallback`boolean	boolean	—	Default: —	Range: —
`Migrate`boolean	boolean	Allows local accounts to be migrated to network accounts. This is typically used when the user account was already created on the system, but you want the accounts to have the same username and password as the user's Okta identity.	Default: —	Range: —
`MigrateUsersHide`array	array	—	Default: —	Range: —
string Username	string	—	Default: —	Range: —
`OIDCAccessClientID`string	string	—	Default: —	Range: —
`OIDCAdminClientID`string	string	—	Default: —	Range: —
`OIDCAuthServer`string	string	—	Default: —	Range: —
`OIDCIgnoreCookies`boolean	boolean	—	Default: —	Range: —
`OIDCSecondaryLoginClientID`string	string	—	Default: —	Range: —
`OIDCRedirectURI`string	string	The Redirect URI the user is sent to after successful authentication.	Default: "nomadoauth://oauth-callback/okta"	Range: —
`LoginLogo`string	string	—	Default: —	Range: —
`BackgroundImage`string	string	—	Default: —	Range: —
`LoginScreen`boolean	boolean	Determines if Jamf Connect Login displays a macOS style login screen instead of a window.	Default: —	Range: —
`MessageOTPEntry`string	string	Text displayed when a user must enter a one time password (OTP).	Default: —	Range: —
`HelpURL`string	string	—	Default: —	Range: —
`HelpURLLogo`string	string	—	Default: —	Range: —
`LocalHelpFile`string	string	A path to a local file that users can access by clicking the "Help" button in the Jamf Connect Login window.	Default: —	Range: —
`EULATitle`string EULA Title	string	Title of the end user license agreement	Default: "End User License Agreement"	Range: —
`EULASubTitle`string EULA Subtitle	string	Subtitle of the end user license agreement	Default: "Terms and Conditions"	Range: —
`EULAText`string EULA Text	string	Text used for the end user license agreement (use three asterisks to create a line break in the text)	Default: —	Range: —
`EULAPath`string EULA Path	string	The path to a file storing the end user license agreement record	Default: —	Range: —
`CreateAdminUser`boolean	boolean	—	Default: —	Range: —
`EnableFDE`boolean	boolean	—	Default: —	Range: —
`EnableFDERecoveryKey`boolean	boolean	—	Default: —	Range: —
`EnableFDERecoveryKeyPath`string	string	—	Default: —	Range: —
`ScriptPath`string	string	—	Default: —	Range: —
`ScriptArgs`array	array	The arguments used with a specified script run by the RunScript mechanism	Default: —	Range: —
string Arguments	string	—	Default: —	Range: —
`DemobilizeUsers`boolean	boolean	—	Default: —	Range: —
`OIDCProvider`string required	string	Specifies the IdP provider integrated with Jamf Connect Login.	Default: "Azure"	Range: Microsoft Azure AD (Azure), Google Identity (GoogleID), IBM Cloud Identity (IBMCI), OneLogin (OneLogin), PingFederate (PingFederate), Custom (Custom)
`OIDCClientID`string required	string	—	Default: —	Range: —
`OIDCROPGID`string	string	The Client ID of the added app in you IdP used for authenticating the user's password via a resource owner password grant (ROPG) workflow. This value should match the OIDCClientID key. Depends on: OIDCProvider	Default: —	Range: —
`OIDCNewPassword`boolean	boolean	If set to true, the user must create a new password on the computer If set to false, the user must validate with their existing IdP password, which will also become the local password. Depends on: OIDCProvider ∈ [GoogleID]	Default: true	Range: —
`OIDCAdmin`array	array	Determines which roles become an admin at the loginwindow. Users assigned a specified role become an admin at the loginwindow.	Default: —	Range: —
string Role	string	—	Default: —	Range: —
`OIDCAdminAttribute`string	string	—	Default: —	Range: —
`OIDCClientSecret`string	string	The client secret used by Jamf Connect Login and your IdP. Depends on: OIDCProvider	Default: —	Range: —
`OIDCTenant`string	string	—	Default: —	Range: —
`OIDCDiscoveryURL`string	string	—	Default: —	Range: —
`RightsTmpCache`boolean	boolean	When using the AuthUI rule, determines if the token cache is set to /tmp/cachedata.	Default: —	Range: —