Jamf School Integration - Installing and Managing

This guide is designed to give Incident IQ administrators an overview of the following Jamf School integration app related topics:

• Managing settings that control asset creation and deletion, as well as when and what information is updated during syncs
• Setting up location and model mappings
• Enable remote device actions
• Sync and asset history lookup tools
• Frequently asked integration questions

 

You can use the following links below to quickly navigate to a specific section in this document. To quickly return to this index simply use the "Return to Index" link located at the end of any section.

1. Introduction
2. Installing Jamf Schools 
3. Integration Overview
   
   1. Overview Tab
   2. General Settings Tab
   3. Location Mappings Tab
   4. Model Mappings Tab
   5. Sync History Tab
   6. Asset History Tab
4. Remote Device Actions
5. Frequently Asked Questions
   
   1. What location should I use for my default location?
   2. Can I pull room information from Jamf School into Incident IQ?
   3. Can I map certain fields coming from Jamf School to default asset fields in Incident IQ?
   4. Why are assets not getting created during syncs?
   5. Why are asset tags not updating during syncs?

 

The Jamf School integration app is designed to give school districts the ability to create, manage, and automatically assign assets to students in Incident IQ by utilizing Jamf asset data. In addition, this integration with Incident IQ also allows agents and admins the ability to view an asset's metadata in one convenient location. This includes basic device information, OS and firmware versions, as well as other data agents may find useful during the course of working a ticket.

When installed, you can access the Jamf School Integration app by selecting Incident IQ Apps > Apps Management. This will take you to your Installed Apps page where you can select the Manage button to access the Jamf School Integration management page.

[Return to Index]

 

To install the Jamf School integration, begin by clicking on Incident IQ Apps > Browse on the left side bar. Next, under the Asset Management section, click on the Jamf School.

From here, simply select Install and follow the steps to complete the installation.

Once installed in Incident IQ you will need to click on Manage App Settings.

Next, under the General Setting tab, you will need to allow access to your Jamf School asset data by entering the following Jamf School information:

• Network ID - This can be found by selecting Devices > Enroll Device(s) within Jamf School.
  
• API Key - This key can be found or a new one generated by clicking on Organization > Settings > API within Jamf School.
• Instance Url - The URL used to access your Jamf School instance.

Next, you will need to run a sync. Navigate to the Overview Tab and click Start Full Sync. This will accomplish the following:

• Establish a connection Incident IQ and Jamf School asset information. 
• Allows Incident IQ to see what models are available in your Jamf School. This is necessary to set up automatic asset creation.

[Return to Index]

 

The following sections is designed to give you a detailed overview of each tab of the integration and the tabs intended purpose. After installing Jamf School and running your first sync. Your next steps are to:

1. Enable how your assets are create and updated within iiQ under the General Settings Tab. 
2. Map the location of assets under the Location Mapping Tab.
3. Map the model for your assets under the Model Mapping Tab.
4. Run a full sync under the Overview Tab.

• Overview Tab
• General Settings Tab
• Location Mapping Tab
• Model Mapping Tab
• Sync History Tab
• Asset History Tab

[Return to Index]

 

The Overview Tab provides gives you the ability to quickly review the status of the most recent sync between Incident IQ and Jamf School. While syncs will automatically run overnight, you have three additional options: 

• Start Full Sync - manually start a new sync.
• Re-Run Last Sync - run the very last sync again. 
• Push Data - if you have set up write back functionality push the data back to your asset integration form iiQ. Please see the section below for more details on creating custom values fields that are pushed from iiQ to your asset management integration. 

Additionally, you can use the View Details button to take you directly to the Sync History tab where you can review the count of assets updated, added, or skipped over during the most recent sync.

[Return to Index]

 

The General Settings tab has the settings that control when information is brought in or updated automatically, as well as field mappings between the Jamf School and Incident IQ. As such, you can find the following settings here:

• Authentication fields to enter the Jamf School Network ID, API Key, and Instance Url.
• Options that control if assets are automatically created, updated, and deleted during system syncs.
• The ability to turn on automatic room assignment for assets if you are storing this data in Jamf.
• Custom field asset mapping options to pull in additional data for use in asset filters and custom view columns
• An option to enable the use of remote asset features available in Jamf directly on an asset detail's page by administrators and agents with the correct permissions

The Authentication section is where you enter in the following fields for Jamf School authentication information: 

• Network ID
• API Key
• Instance Url

The Mapping section manages what data is created and updated in Incident IQ based on data coming from Jamf. This includes:

• Create Asset: Selecting this will automatically create assets in IIQ to match any new device discovered in Jamf during a sync.
• Update Asset: Selecting this will automatically update assets in IIQ to match any updates to a device's data discovered in Jamf during a sync.
• Update Custom Fields: Selecting this option will only allow new information being pulled into custom fields to update during a sync.
• Delete Asset: Selecting this will automatically delete assets in IIQ to match any assets deletions that have occurred in Jamf during a sync.

Next, under the Import Options section you can enable the Create Rooms option. This will automatically create rooms associated with assets in Jamf School if these rooms do not already exist in Incident IQ. Additionally, the Update Asset Owner option will automatically update owner in Incident IQ based on the primary user in Jamf School. 

The Map custom values section allows you to select additional values you want imported and map them to default or custom fields in iiQ. This gives you the ability to pull in custom data fields and custom view column options. Click on the Add button. 

Next, fill out the following field mapping options:
Please note, there may be pre-configured mapping and they can not be changed.

1. Select the custom value  
2. Set the Map Direction
   The following fields are only supported for syncing from iiQ to Jamf Schools: Asset Tag, and Notes.
   • • Jamf to Incident IQ
     • Incident IQ to Jamf 
     • Both directions (if both, data will push from Incident IQ to Jamf first.)
3. Select the iiQ field the custom value should map too. You can map to default field or map to a custom field.
   • If you map to a Custom Field, you will need to set a field name, select a field type (text, number, or date), and set whether the field information needs to be searchable through filters.

The last section is the Remote Device Actions. You can enable remote device actions that administrators and agents with the correct permissions can access directly on an asset's details page in Incident IQ. These options include:

• jamfSchool: Move a Device:  Update the location of a Jamf School managed device.

• jamfSchool: Refresh Inventory:  Allow a user to schedule a full inventory refresh of the given device.

• jamfSchool: Remote Restart Device:  Allow a user to remotely restart a Jamf School managed device.

• jamfSchool: Remote Unenroll Device:  Allow a user to schedule the removal of the management profile from a Jamf School managed device.

• jamfSchool: Remote Wipe Device:  Allow a user to remotely wipe a Jamf School managed device.

• jamfSchool: Restore Device:  Allow a user to remotely restore a Jamf School managed device.

• jamfSchool: Trash a Device:  Allow a user to remotely trash a Jamf School managed iOS device.

• jamfSchool: Update the eSIM Cellular Plan:  Query a carrier URL for active eSIM cellular-plan profiles.

Please see the section below for more details on enable device actions based on users roles. 

[Return to Index]

 

This tab allows you to select or modify your current location mappings between IIQ and Jamf School. You can choose to automatically assign a device to a default location in Incident IQ if it does not match any location mappings set. This is especially important if you are using the Jamf School integration to automatically create assets because assets must have a location set to be created.

Location is required for an asset to be created in iiQ. The way this works during a sync is as follows:

• If an asset matches the location mapping, then the asset will get created and assigned to the corresponding location the mapping is set to.
• If an asset does not match a location mapping, or no location mappings are present, and a default location is selected, then the asset will get created and assigned to the default location.
• If an asset does not match a custom mapping, or no custom mappings are present, and there is no default location set, then the asset will not be created during a sync.

The Custom Mapping Options allows you to choose how you would like devices to map in IIQ. When Location Name is selected, you will be presented with a list of locations currently in the system. From here, you can select Auto-Map Location Names to match location names between IIQ and Jamf School. Alternatively, you can also manually search for and select your location assignments if needed.

[Return to Index]

 

This tab allows you to select or modify your current model mappings between IIQ and the Jamf School. You can use the Auto-Map Models button to automatically attempt to match models in your list of devices with models that already exist in IIQ.

Alternatively, you can also manually select what model your device should map to using the drop-down menus to the right of each listed device.

If your device will not auto-map and is not available from the drop-down options, then it most likely does not currently exist in IIQ. In this case, simply select the Create New Model button on the right of the device mapping in question to automatically create and activate this model during your data sync.

[Return to Index]

 

This tab allows you to view your sync history between IIQ and the Jamf Schools. Every sync, whether it completed successfully or not, is logged for reference purposes and available for review in the View details of a sync list.

Clicking on any sync, in particular, will open that sync's details. From here, you can review the full list of what devices were updated, created, deleted, or skipped during the sync. Additionally, you can narrow down your view by using the filter options at the top of the list.

[Return to Index]

 

The Asset History tab allows you to search for basic information on any device currently located in your Jamf School. Simply enter in a valid serial number in the Search for asset field to begin your search.

Once you've selected a device, you'll be able to see the following Jamf Schools information:

• External ID
• Model
• Owner Email
• Organizational Unit
• Serial Number
• Location Name

Additionally, you'll also see a list of actions applied to this device during recent system syncs.

[Return to Index]

 

Under the General Settings tab at the bottom of the page, you can enable remote device actions that administrators and agents with the correct permissions can access directly on an asset's details page in Incident IQ. These options include:

• jamfSchool: Move a Device:  Update the location of a Jamf School managed device.

• jamfSchool: Refresh Inventory:  Allow a user to schedule a full inventory refresh of the given device.

• jamfSchool: Remote Restart Device:  Allow a user to remotely restart a Jamf School managed device.

• jamfSchool: Remote Unenroll Device:  Allow a user to schedule the removal of the management profile from a Jamf School managed device.

• jamfSchool: Remote Wipe Device:  Allow a user to remotely wipe a Jamf School managed device.

• jamfSchool: Restore Device:  Allow a user to remotely restore a Jamf School managed device.

• jamfSchool: Trash a Device:  Allow a user to remotely trash a Jamf School managed iOS device.

• jamfSchool: Update the eSIM Cellular Plan:  Query a carrier URL for active eSIM cellular-plan profiles.

Please note, administrators are given full access to all remote features permissions by default. However, each of the remote features listed above are controlled by an individual permission. This makes it possible to customize which permissions an agent has access to, without needing to give them full access to all of the remote features. These permissions can be found underneath the App Specific section on policies and individual user permissions pages.

On the asset details page you will have access to preform these actions. 

[Return to Index]

 

The following section consists of common questions that users have when installing and setting up the Jamf School integration. Please note, if you do not find to an issue you are experiencing in this section please contact the Incident IQ Customer Support team for further assistance.

[Return to Index]

 

If you are unsure of what location you should utilize, we recommend setting the district/central office as your default location. Alternatively, you may also setup an entirely separate location (such as "Unassigned") to utilize for this purpose as well.

[Return to Index]

 

If you are storing room information in Jamf School, you can tie this information to assets stored in Incident IQ. This includes the ability to create rooms for any given location if they do not already exist in the system. To do so, you will want to go to the General Settings tab and enable the room number option.

[Return to Index]

 

You can pull in data from Jamf School for use in asset filtering and custom view columns in the General Setting tab of the integration app. To set one of these fields up, you will need to begin by clicking on the Add button at the bottom of the Map custom values from jamfSchool section.

From here, you will now need to set the following:

• Select the specific data field in Jamf School you want to pull in as a custom field
• Set whether the data only pulls from Jamf to Incident IQ, sends from Incident IQ to Jamf, or flows in both directions (if both, data will push from Incident IQ to Jamf first.)
• Specify if the data should map to a custom field
• And finally, set a field name, select a field type (text, number, or date), and set whether the field information needs to be searchable through filters.

[Return to Index]

 

For a sync to create assets automatically, the following options need to be turned on or mapped in app management as detailed in this section of this article:

• The Create asset option must be turned on in the General Settings tab.
• Location mappings, or a default location, must be set in the Location Mappings tab.
• The model of the device must be mapped in the Model Mappings tab.

Please note, if your asset does not have a model associated with it in Jamf School, then the asset cannot be added automatically. However, you can manually create or import the asset into the system to circumvent this issue. During the next system sync, if Incident IQ detects a matching serial number inside of Jamf School, the system will then automatically associate the Jamf data with this asset.

[Return to Index]

 

By default, Incident IQ does not have the option to update asset tags automatically enabled for asset integrations. To turn on asset tag updates during syncs, select Incident IQ Apps > Manage from the left navigation bar, and the click on the Data Mapping tab. From here, check the Asset Tag option underneath the Asset Field Mappings section and then save.

Please note, even though this option is not enable by default, the asset tag field is required for asset creation. Because of this, when an asset is created during a sync without this option enable the following will occur:

• If asset tag information is available, then the asset will be created with the asset tag stored in the Jamf School.
• If asset tag information is not available, then the asset will be created with the serial number filled in for the asset tag.

[Return to Index]