Jamf

Jamf Integration Overview

The Jamf integration pulls device inventory from Jamf Pro into Unthread's asset inventory. It syncs both computers (Macs) and mobile devices (iPhones/iPads).

Setup & Configuration

• Configured under Settings > Apps & Integrations
• Requires three fields from Jamf Pro: Instance URL, Client ID, and Client Secret (from Jamf Pro's API Roles and Clients)
• Users can choose which device types to sync: computers, mobile devices, or both

What Gets Synced

For computers (Macs):

• Name, serial number, asset tag, last IP address, managed status
• Make, model, model identifier
• OS name, version, and build
• Assigned user info: username, email, real name, position, department, building, room

For mobile devices (iPhones/iPads):

• Name, serial number, asset tag, model, model identifier
• OS version and build
• Assigned user info (same fields as above)

How It Works

• Pull-based sync (no webhooks) — users trigger a sync manually via a "Sync from Jamf" button in the Assets list
• Devices are categorized automatically as Desktop, Laptop, Tablet, or Phone based on the model identifier
• Device status is mapped as Managed or Unmanaged
• Devices are linked to Unthread users by matching email addresses
• If a device is removed from Jamf, the corresponding asset is marked as "Removed from Jamf" on the next sync

What Users Can Do

• Connect Jamf in Settings > Apps & Integrations
• Manually sync devices from the Assets list
• View synced assets alongside other assets in Unthread — they show up with jamf as the external source

What Permissions Are Needed

1. Read Computers — needed for the /api/v1/computers-inventory endpoint to list and read computer inventory records (general info, hardware, OS, and user/location sections).

2. Read Mobile Devices — needed for /api/v2/mobile-devices to list mobile devices and /api/v2/mobile-devices/{id}/detail to get per-device details.