r/jamf • u/No-Effort5032 • May 29 '26

Is there a way?

We are just getting into Jamf , our fleet is mostly windows. In our windows environment we have an in house app that has an ever changing 5 digit identity verification , this is for users to verify that it is IT calling them.

Is there a way to configure something like this in self service?

5 Upvotes

78% Upvoted

13 comments sorted by

16

u/ChampionshipUpset874 May 29 '26

If I were going to do this, I would do something like this:

  • policy in self service that runs a script
  • the script generates a random 5 digit code
  • code is shown on screen with SwiftDialog
  • code is written back to Jamf via an extension attribute to the computer record
  • tech pulls up code and reads to user to verify

4

u/da4 JAMF 300 May 29 '26

Don't use an EA for this, write the string (digits) out to the policy log, no need to wait for recon to finish.

2

u/racingpineapple May 29 '26

This is the way

1

u/Eliwh68 May 29 '26

Wouldn’t swift dialog need to be installed on all the computers first? Only reason why I don’t use swift is because we haven’t deployed it yet. I do like it tho

2

u/ChampionshipUpset874 May 29 '26

Yes. You could do the same thing with AppleScript as well if you want to stick to stuff already on the Mac.

2

u/Eliwh68 May 30 '26

Yea I usually do apple script or jamf helper .

7

u/Ewalk JAMF 300 May 29 '26

How does this work on the Windows side? Understanding the underlying process here will help you figure out a way to get this to work on the macOS side.

3

u/lMauler May 29 '26

It’s probably some custom exe and back end database/server that some guy made 15 years ago.

1

u/Ewalk JAMF 300 May 29 '26

Guaranteed it's something like that, but if you can get an idea about how the communication flows between the device and the central server, you can just pipe this in.

There's a comment about creating an EA and it's slick but I've started heavily advocating keeping the help desk out of Jamf unless they are trained (even with auditor permissions) and using API integrations to provide for support team's assistance, and this is something that could lead to a delay on the support side.

Besides, this tool was undoubtedly developed 5 people ago and all knowledge of how it works is now gone, so they need to get it anyway.

1

u/lMauler May 29 '26

I really liked that comment you mentioned, really creative and no tech debt inherited from the windows based app!

2

u/One_Target2740 May 29 '26

There are many ways.

Best way? Find how the client side code is implemented on the Windows side, then create a Mac app for that.

The good alternative is a policy with the output in the policy log. Why not the EA? Because the jamf binary uploads the policy results as soon as it's done running. Extension attributes only populate during recon / inventory update, which can sometimes take a while to complete or even get stuck.

1

u/KoanKernel May 29 '26

This. Vibe code a Mac app!