jamf_SSOIntegration

Represents the Single Sign-On (SSO) integration configured in the Jamf Pro tenant. When enabled, the SSO provider can map attributes to authenticate as any Jamf account or group, making it a Tier 0 node with significant security implications.

Represents the Single Sign-On (SSO) integration configured in the Jamf Pro tenant. When enabled, the SSO provider can map attributes to authenticate as any Jamf account or group, making it a Tier 0 node with significant security implications.

Created by

process_sso_node in lib/preprocess.py

Edges

The tables below list edges defined by the Jamf extension only. Additional edges to or from this node may be created by other extensions.

Inbound Edges

Edge Type	Source Node Types	Traversable
jamf_Contains	jamf_Tenant, jamf_Site	✅
jamf_Update_SSO_Settings	jamf_Account, jamf_DisabledAccount, jamf_Group, jamf_ApiClient, jamf_DisabledApiClient	✅

Outbound Edges

Edge Type	Destination Node Types	Traversable
jamf_SSO_Login	jamf_Account, jamf_DisabledAccount, jamf_Group	✅

Properties

Property Name	Data Type	Description
sso_enabled	boolean	Whether SSO is enabled
idp_url	string	Identity Provider URL
idp_provider_type	string	Type of identity provider
entity_id	string	SAML entity ID
group_attribute_name	string	Attribute name for group mapping
group_rdn_key	string	RDN key for group lookups
site_id	string	Site ID (always “-1” for global)
tier	integer	Security tier classification (0)
name	string	Name of the SSO integration
enrollment_sso_config	string	Enrollment SSO configuration

Relationship Diagram