Jamf Connect Sync

com.jamf.connect.sync

Jamf Connect Sync Settings

macOS

Configuration Keys (70)

Key	Type	Title	Description	Default	Range
`AuthServer`required	string	—	Specifies your Okta authentication domain.	"yourcompany.okta.com"	—
`PFC_SegmentedControl_0`required	string	—	—	—	—
`LicenseFile`	data	—	The contents of a .jamfconnectlicense file encoded in Base64 data format.	—	—
`PeriodicUpdateTime`	integer	—	Specifies the interval, in minutes, between background updates.	15	—
`SignInCommand`	string	—	Specifies a script or other binary to be run after a successful sign in.	—	—
`DontShowWelcome`	boolean	—	—	—	—
`UseKeychain`	boolean	—	—	—	—
`LocalPasswordSync`	boolean	—	—	—	—
`LocalPasswordSyncOnMatchOnly`	boolean	—	—	—	—
`LocalPasswordSyncMessage`	string	—	—	"Please enter your local user account password."	—
`PasswordCheckUpdateTime`	integer	—	Specifies the interval, in minutes, that Jamf Connect Sync checks the local password for synchronization. If unspecified, Jamf Connect Sync will check every 15 minutes by default.	15	—
`KeychainItems`	dict	—	Determines which keychain items Jamf Connect Sync should synchronize with the local password.	—	—
`{{key}}`	string	Keychain Item	—	—	—
`{{value}}`	string	Account	—	—	—
`KeychainItemsInternet`	dict	—	Determines which internet accounts Jamf Connect Sync should synchronize with the local password.	—	—
`{{key}}`	string	Keychain Item	—	—	—
`{{value}}`	string	Account	—	—	—
`KeychainItemsDebug`	boolean	—	—	true	—
`ADExpirationShow`	boolean	—	—	—	—
`WarnOnPasswordExpiration`	boolean	—	Determines whether Jamf Connect Sync should warn the user on sign in if the password is about to expire.	—	—
`ExpirationWarningDays`	integer	—	—	5	—
`PasswordExpirationMenu`	boolean	—	Determines if the countdown before password expiration is displayed in the menu bar.	—	—
`PasswordExpirationMenuDays`	integer	—	An integer, in days remaining, before the password expiration countdown is displayed in the menu bar.	15	—
`ChangePasswordTimer`	integer	—	Specifies an interval, in minutes, until the user is prompted to sign in again after a password change.	3	—
`ChangePasswordOrder`	array	—	Determines the order and setting for the password change menu. If unspecified, Okta is used by default for password changes. If Kerberos is enabled, Jamf Connect Sync will use Kerberos to authenticate to your Active Directory domain, and then authenticate to Okta.	—	—
	dict	ChangePasswordItem	—	—	—
`{{key}}`	string	—	—	—	—
`{{value}}`	string	—	—	—	—
`{{key}}`	string	—	—	—	—
`{{value}}`	string	—	—	—	—
`PasswordChangeCommand`	string	—	Specifies a script or other binary to be run after the user changes a password.	—	—
`PasswordPolicy`	dict	—	—	—	—
`minLength`	string	—	—	—	—
`minLowerCase`	string	—	—	—	—
`minNumber`	string	—	—	—	—
`minSymbol`	string	—	—	—	—
`minUpperCase`	string	—	—	—	—
`minMatches`	string	—	—	—	—
`MessagePasswordChangePolicy`	string	—	—	"Please review the employee handbook."	—
`KerberosRealm`	string	—	—	—	—
`TicketsOnSignIn`	boolean	—	Determines if Jamf Connect Sync retrieves Kerberos Tickets on sign in.	—	—
`KerberosRenew`	boolean	—	—	—	—
`KerberosShortName`	string	—	—	"joel"	—
`KerberosShortNameAsk`	boolean	—	—	—	—
`KerberosShortNameAskMessage`	string	—	—	"Please enter your Active Directory user name."	—
`IgnoreDomainReachability`	boolean	—	—	—	—
`LDAPServers`	array	—	Specifies domain controllers to use for Active Directory lookups.	—	—
`LDAPServer`	string	—	—	—	—
`MenuIcon`	string	—	Path to the menu bar icon image.	—	—
`PFC_SegmentedControl_Menu`required	string	—	—	—	—
`HideAbout`	boolean	—	—	—	—
`HideActions`	boolean	—	—	—	—
`HideChangePassword`	boolean	—	—	—	—
`HideGetHelp`	boolean	—	—	—	—
`HideGetSoftware`	boolean	—	—	—	—
`HideLockScreen`	boolean	—	Hides the Lock Screen menu item.	—	—
`HidePreferences`	boolean	—	—	—	—
`HideQuit`	boolean	—	—	—	—
`HideSignIn`	boolean	—	—	—	—
`MenuAbout`	string	—	—	"This app"	—
`MenuActions`	string	—	—	"Quick Actions"	—
`MenuChangePassword`	string	—	—	"Change network password"	—
`MenuGetHelp`	string	—	—	"File ticket"	—
`MenuGetSoftware`	string	—	—	"Get Apps"	—
`MenuLockScreen`	string	—	—	"Screen Lock"	—
`MenuPreferences`	string	—	—	"Settings"	—
`MenuSignIn`	string	—	—	"Login"	—
`ActionsUpdateTime`	integer	—	—	15	—
`GetHelpType`	string	—	Determines which GetHelp type is used.	—
`GetHelpOptions`	string	—	Specifies the URL or path for GetHelpType. <<serial>>, <<fullname>>, <<shortname>> and <<domain>> are supported as substitutions.	—	—
`SelfServicePath`	string	—	—	—	—
`UseKeychainPrompt`	boolean	—	Displays the Sign In window on launch.	—	—
`UseKeychainPromptExlusions`	array	—	—	—	—
`Username`	string	—	—	—	—
`CenterSignIn`	boolean	—	—	—	—
`SignInLogo`	string	—	Specifies the path to image file used as a logo.	—	—
`LabelUsername`	string	—	—	"Corporate e-mail"	—
`LabelPassword`	string	—	—	"Corporate Password"	—
`TitleSignIn`	string	—	—	"Sign in to Okta"	—
`AutoAuth`	boolean	—	—	true	—
`CheckSafariExtension`	boolean	—	—	true	—
`MessagePluginDisabled`	string	—	Text displayed to users when the Safari plugin is not enabled.	"Please enable the plugin in Safari."	—
`GetCertificateAutomatically`	boolean	—	—	—	—
`X509CA`	string	—	—	—	—
`Template`	string	—	—	"User Auth"	—
`ExportableKey`	boolean	—	—	—	—
`WifiNetworks`	array	—	—	—	—
`SSID`	string	—	—	—	—
`{{key}}`	string	Keychain Item	—	—	—
`{{value}}`	string	Account	—	—	—
`{{key}}`	string	Keychain Item	—	—	—
`{{value}}`	string	Account	—	—	—
	dict	ChangePasswordItem	—	—	—
`{{key}}`	string	—	—	—	—
`{{value}}`	string	—	—	—	—
`{{key}}`	string	—	—	—	—
`{{value}}`	string	—	—	—	—
`minLength`	string	—	—	—	—
`minLowerCase`	string	—	—	—	—
`minNumber`	string	—	—	—	—
`minSymbol`	string	—	—	—	—
`minUpperCase`	string	—	—	—	—
`minMatches`	string	—	—	—	—
`LDAPServer`	string	—	—	—	—
`Username`	string	—	—	—	—
`SSID`	string	—	—	—	—