Jamf After Dark

Okta's Dan Hefley (https://www.linkedin.com/in/dan-hefley), Senior Product Manager for Device Access, explains how Platform SSO brings enterprise identity to the Mac. From day-zero Setup Assistant enrollment in macOS 26 to device bound SSO using secure enclave keys, Dan covers what IT teams need to know about deploying Platform SSO with Okta and Jamf. Dan shares his perspective as a former MDM admin turned identity product manager, discusses how device bound SSO prevents session hijacking with hardware-backed keys, and explains why the Shared Signals Framework between Okta and Jamf creates layered security. Hosts Josh Thornton and Kat Garbis explore what this means for organizations managing Apple fleets.
1:44 Meet Dan Hefley - Senior Product Manager at Okta 5:00 What Is Okta? Vendor-Neutral Identity Provider Overview 6:23 Why Identity and Device Security Go Hand in Hand 7:21 What Is Platform SSO? Native macOS Framework Defined 8:07 Evolution from Jamf Connect Basic to Platform SSO 9:15 Why Platform SSO Was 9:47 Platform SSO in Setup Assistant 10:08 Day-Zero Enrollment Flow - ABM to Jamf to Okta MFA 11:43 Solving Enrollment Friction with Separated Device and User Registration 12:18 Password Syncing Benefits 16:40 How Device Bound SSO Prevents Session Hijacking 17:53 Identity Threat Protection and Continuous Authentication 18:06 Shared Signals Framework - Okta and Jamf Working Together
20:40 Okta FastPass and Passwordless Authentication on Mac 21:20 Device Bound SSO Completes the Day-Zero Story 22:30 Getting Started - Requirements and Deployment Considerations 26:26 Okta's Platform SSO Roadmap and Future Direction 27:43 Key Takeaway - Identity and Device Teams Belong in the Same Room
RESOURCES:
- Mac Admins Slack - Platform SSO Channel: https://macadmins.slack.com - IAMSE Blog - Okta Integration Guides: https://iamse.blog - Jamf Learning Hub: https://learn.jamf.com/ - Jamf and Okta integrations: https://www.jamf.com/integrations/okta/ Subscribe for Apple device management and security insights
WHO THIS IS FOR:
IT administrators and security teams managing Mac fleets in enterprise environments. Relevant if you're evaluating Platform SSO with Okta, migrating from Jamf Connect Basic, or planning identity integration for zero-touch Mac deployment.
#Okta #Jamf #macossecurity #AppleSecurity #DeviceBoundSSO #macOS #IdentityManagement #PlatformSSO #ZeroTouchDeployment #JamfAfterDark #EnterpriseSecurity #MacAdmin #TrustedAccess #podcast

Educators: ever wonder why certain apps are on your classroom iPads? App Catalog shows you the why behind every app, plus how other teachers use them.
We also discuss Jamf's Matter Innovation Hubs - free community learning centers operated in collaboration with Jamf in the US and internationally. These hubs focus on technology-enhanced, student-centered learning and serve educators, students, and communities through hands-on programs and the Matter Career Readiness Institute.
GUEST:
Kelly Watkins Conrad - Senior Program Engineer, Jamf Community Education (manages devices across all Matter Hub locations globally, 14 years at Jamf)

CHAPTERS
2:00 Meet Kelly Watkins Conrad: Jamf Senior Program Engineer
3:20 What Are Matter Innovation Hubs?
5:45 Matter Hub Global Locations
9:24 The Problem - Teachers Can't Find Apps They Need
16:51 Main Benefit - See Why Apps Were Chosen
18:00 Sharing Teacher Use Cases Within Districts
21:25 2026 Expansion - Stay tuned!

#JamfSchool #AppCatalog #EdTech #matterngo

If you're clicking through Jamf Pro configs manually, you're about to learn why that's becoming a problem. Security teams are starting to ban console access. MSPs are wasting hours rebuilding the same configs for each client. And organizations scaling to hundreds of Macs are drowning in manual changes with zero audit trail.
Ryan Legg, Jamf's Solutions Engineer for Infrastructure as Code, breaks down how Terraform lets you manage your entire Jamf environment through code instead of clicking. Whether you're managing 50 Macs or 5,000, here's why this matters NOW.
CHAPTERS
4:45 What is Infrastructure as Code - Explained for Non-Coders
8:15 What is Terraform and Why It Exists
11:30 How Terraform Talks to the Jamf API (Without You Writing Scripts)
14:45 Jamf Terraform Provider - 2+ Years in Development
18:20 Version Control for Configs - Git, Testing, Rollback
21:40 Why This Matters - Audit Trails, No Manual Errors, Scalability
24:30 MSP Use Case - Deploy to Multiple Clients in Minutes
27:15 Enterprise Use Case - Manage Hundreds of Configs with Code
30:10 Small Team Use Case - Document Everything as You Build
34:00 Why Every Admin Should Learn This NOW - The Future is Code
37:13 Getting Started - Resources and Documentation
39:09 Wrap-Up - Where to Get Help


What You Learn:
4:45 "Treating your Jamf config like a software project" - what that actually means
18:20 Multiple admins can submit changes through pull requests - no more stepping on each other
24:30 MSPs: Stop rebuilding configs manually - use one Terraform module across all clients
30:10 - Small teams: Codify early so the next person doesn't start from zero
34:00 - "Organizations are requiring admins OUT of consoles" - security trend you need to know
 
RESOURCES:
Jamf Concepts (Start Here): https://concepts.jamf.com
Trusted by Jamf (Tutorials): https://trusted.jamf.com 
Jamf Developer Portal: https://developer.jamf.com
MacAdmins Slack: https://macadmins.org
 
WHO NEEDS TO WATCH:
Mac Admins who manually configure Jamf Pro (you're wasting time)
MSPs managing multiple Jamf instances (you're rebuilding the same thing repeatedly)
IT teams scaling past 500+ devices (manual configs won't scale)
 
Jamf After Dark: A podcast about managing Apple devices, hosted by Kat Garbis and Josh Thornton.
Guest: Ryan Legg, Solutions Engineer III at Jamf
#JamfAfterDark #Terraform #JamfPro

John Britton, CEO of WorkBrew, joins Jamf After Dark to discuss how organizations can solve the security, compliance, and management challenges of using the open-source package manager Homebrew on macOS at scale.

This episode is a must-listen for any IT or Security leader managing a fleet of Mac devices used by software engineers. Learn how WorkBrew provides visibility, governance, and automated security workflows for developer tools, all while integrating seamlessly with Jamf Pro.
What You'll Learn:
The security and compliance risks of unmanaged Homebrew in the enterprise.
How WorkBrew provides visibility, remote management, and security for Homebrew.
The seamless integration between Jamf Pro and WorkBrew for deployment and device group management.
How to enable developers to use Homebrew as standard (non-admin) users on macOS.
Strategies for distributing and managing private, internal company tools via Homebrew taps.
The end-user experience for a developer when a company adopts WorkBrew.
Featured Guest:

John Britton: Co-founder and CEO of WorkBrew, a platform for securing and managing Homebrew in the enterprise. John is a software engineer with deep expertise in developer tools and experience. He is a contributor to the open-source Homebrew project and is passionate about enhancing developer productivity while meeting enterprise security standards.
0:00:00 - Introduction: Managing Your Digital Tools
0:04:01 - What is Homebrew? The "App Store for Developers" on Mac
0:05:24 - The Challenge: Why Homebrew Creates Risk for IT & Security Teams
0:08:12 - The Solution: What is WorkBrew and How Does it Help?
0:12:19 - Core Features: Deployment, Visibility, Management & Security
0:14:45 - How WorkBrew Benefits Engineers, IT Admins, and Security Teams
0:17:35 - How WorkBrew Integrates with Jamf for Deployment & Policy Management
0:22:55 - Advanced Use Case: Managing Private & Internal Company Packages
0:25:41 - The Developer Experience: Migrating from Homebrew to WorkBrew
0:28:58 - A Major Win: Enabling Homebrew for Standard (Non-Admin) Users
0:32:33 - The Rise of Mac in the Enterprise & Employee Choice
0:36:39 - How to Get Started with WorkBrew (Including the Free Plan)
0:38:58 - Final Thoughts & Key Takeaways
Read more:
Get started with WorkBrew's free and paid plans: https://workbrew.com/
Join the Mac Admins Foundation Slack Community: https://www.macadmins.org/
Learn more about Jamf Pro: https://www.jamf.com/products/jamf-pro/
#Jamf #WorkBrew #Homebrew #MacAdmins #EndpointSecurity

Katie English & Chris Schasse discuss JNUC 2025 highlights: Platform SSO, Blueprints updates, AI security features, and macOS Tahoe improvements.
 
What You'll Learn:
Platform API updates enabling third-party integrations with Jamf Blueprints and compliance features
Platform SSO implementation replacing traditional Jamf Connect workflows
Automated software update workflows through Jamf Blueprints
AI Assistant capabilities for macOS security alerts and configuration profile analysis
macOS Tahoe (macOS 15) and iOS 18 security enhancements
Cybersecurity best practices for October 2025 Cybersecurity Awareness Month
 
Featured Guests:
Katie English - Principal Product Manager at Jamf, former Jamf After Dark podcast host, expert in Apple device management and security product development
Chris Schasse - Owner and Lead Technician at Rocketman Tech, former Jamf Professional Services team member, Jamf-focused MSP specialist, host of the Launchpad meetup


Read more:
https://www.jamf.com/blog/macos-26-platform-sso-simplified-setup/
https://www.jamf.com/blog/introducing-jamfs-ai-assistant/
https://www.jamf.com/blog/getting-to-know-declarative-management/
 
0:00 Introduction: Welcome Back from JNUC 2025
2:09 Cybersecurity Month Discussion
5:15 JNUC 2025 Highlights: Platform API & Blueprints
8:30 Platform SSO: The Future of Mac Identity Management
16:00 Jamf Account OIDC Migration Challenges
18:30 Blueprints Automated Software Updates
21:40 AI Assistant: Security Alerts & Configuration Analysis
32:15 Apple OS Updates: macOS Tahoe & iOS 18
35:05 Platform SSO vs Jamf Connect Strategy
39:40 Security Best Practices for Cybersecurity Month
44:20 New iPhone 16 Features & Hardware Security
47:00 Closing Thoughts & Resources
 
#Jamf #WorkBrew #Homebrew #MacAdmins #EndpointSecurity