JAMF PRO CLASSIC API UPDATE
JAMF PRO CLASSIC API PASSWORD
JAMF PRO CLASSIC API MAC

If you’re interested in sponsoring the Mac Admins Podcast, please email for more information. Jamf Pros Classic API supports Bearer Authentication since version 10. Online (see #anzmac in MacAdmins Slack for connection details) Configure the profile with the Team ID of X9E956P446 Jamf Pro is a powerful MDM. Most Thursdays at 17:00 BST (UTC+1), 19:00 BST when in-person Online weekly (see #laa-pub in MacAdmins Slack for connection details), sometimes in-person $1099-$1499 Commercial (pricing increases over time), Online (one in-person event Cupertino, CA, USA) Mac Admins Podcast Community Calendar, Sponsored by Watchman Monitoring Potrebka, James Stracey, Timothy Perfitt, Nate Cinal, William O’Neal, Sebastian Nash, Command Control Power, Stephen Weinstein, Chad Swarthout, Daniel MacLaughlin, Justin Holt, William Smith, and Weldon Dodd To disable the use of Basic authentication in the Classic API, deselect the Allow Basic authentication in addition to Bearer Token authentication checkbox. Basic authentication is enabled by default.

JAMF PRO CLASSIC API PASSWORD

Navigate to Settings > Jamf Pro User Accounts & Groups > Password Policy to access this feature.

Rick Goody, Mike Boylan, Melvin Vives, William (Bill) Stites, Anoush d’Orville, Jeffrey Compton, M.Marsh, Hamlin Krewson, Adam Burg, A.J. You can now enable the use of Basic authentication in addition to Bearer Token authentication in the Classic API within the Jamf Pro user interface. The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include: Of course there is a Derflounder post about moving to bearer tokens.MacAdmins PSU 2022 Presentation Video: Demystifying JamfUploader.JNUC 2021 Presentation video: Making package uploading and deployment easier with JamfUploader (Anthony Reimer and Graham Pugh).Detect Thoughts REST app by Charles Edge.Prune by Leslie Helou – Remove unused items from your Jamf server.Python-jamf by Uni of Utah Marriott Library.Blog Post (Feb 2022): How do changes to the Jamf Pro API authentication affect JamfUploader and JSSImporter?.Tom Bridge, Principal Product Manager, JumpCloud – Charles Edge, CTO, Bootstrappers.mn – Marcus Ransom, Senior Sales Engineer, Jamf – Graham Pugh – Jamf Pro Classic API Authentication Changes.So there are big changes coming to the Jamf API and Graham Pugh will be joining us to talk through what that means for some of the projects he maintains. The original Jamf Classic API won’t be allowing basic authentication any longer, which means any workflows that hook into the old URI-based REST endpoints will be going away. Thanks again to everyone who has provided feedback on this change.APIs are an integral aspect of how we can programmatically work with any product. The Jamf Pro ' classic ' REST API > uses basic.

This release introduces a subtle but important change to the behaviour of the processor, so I thought it worthy of an explanation here.

We continue to evaluate all aspects of our APIs to ensure simple and secure programmatic access to the entire Jamf portfolio of products. Today we released a new beta of the JSSImporter processor for importing packages into Jamf Pro using AutoPkg. Starting in Jamf Pro 10.36 you can disable this directly within the web interface by unchecking the 'Allow Basic authentication in addition to Bearer Token authentication' checkbox in your Password Policy settings as outlined in the release notes ( ). We encourage customers not currently using the Classic API to disable basic auth as soon as possible to reduce the attack surface of their Jamf Pro instance.

JAMF PRO CLASSIC API UPDATE

We know that a change like this causes additional work for customers and partners to update API workflows, but we believe this change is critical to improving the overall security posture of Jamf Pro. Today, the Classic API is the main target for attackers executing brute force attacks to attempt to gain access to a Jamf Pro instance.īy using the same authorization mechanism as the newer Jamf Pro API, we're able to funnel all auth requests through a small number of endpoints that we can rate limit, without limiting every API request. If you can clarify what product youre using, thatll help identify what workflow/API would be best to accomplish your goal. Jamf School has an API, with public documentation available here.Jamf Pro has two APIs, the Classic API and Jamf Pro API, both with documentation available here. The change in authorization mechanism in the Classic API was an effort to quickly mitigate the threat of brute force attacks against Jamf Pro instances. It sounds like you might be conflating the various Jamf APIs and products. We received some great feedback from the community, and there were some questions around why we chose to make this change. In Jamf Pro 10.35 we announced the deprecation of Basic authentication in the Classic API scheduled for a future release of Jamf Pro ( ).

Jamf pro classic api