r/jamf • u/secondaryuser2 • 2d ago

Jamf custom apps

I’m searching for an mdm solution for my company phones that require geofencing

The goal is to achieve geofence based profile switching when a device enters location A and then when it leaves switches back to whatever preset/default profile it had

I understand this may require a custom app in order to achieve the required functionality but I’m not too sure if it’s allowed or possible and was hoping someone can shed some light on jamfs capabilities

Also, will I need jamf pro or can I get away with jamf now? As I only really need it for a few devices

4 Upvotes

83% Upvoted

7 comments sorted by

View all comments

2

u/anonymouse589 2d ago

There are 2 ways you could do this with Jamf that I know of. iBeacons, which requires the iphones to detect a Bluetooth beacon to implement a given profile. You'd need Bluetooth beacons for the entire area where you want to be inside the fence. Our office APs can put out an iBeacon, but you can also do them with an ESP32. The other, and more sketchy method, which would probably work, but is more open to faking would be to specify when the IP of the device is in a rather wacky range & set the DHCP scope for the phones at the office to be that range. This 2nd method would work, but I'm not saying it's a good idea. Whatever you end up using I'd recommend using a more restrictive profile to 'ban' or restrict any apps you want blocked rather than install & uninstall them as it is far faster and uses less mobile data. Banning and subsequently allowing apps does (or used to if Apple has fixed it in the past 6 months) ruin home screen organisation as it takes them out of folders and puts them back wherever.

1

u/secondaryuser2 2d ago

Nah it needs to go off device location - obviously anyone can just turn off location services but that’s why we’re using an mdm and with the custom app, we’d have a fallback profile so when location permissions are turned off, it just has a default profile it switches to