jamf_SSOIntegration

Represents the Single Sign-On (SSO) integration configured in the Jamf Pro tenant. When enabled, the SSO provider can map attributes to authenticate as any Jamf account or group, making it a Tier 0 node with significant security implications.

Represents the Single Sign-On (SSO) integration configured in the Jamf Pro tenant. When enabled, the SSO provider can map attributes to authenticate as any Jamf account or group, making it a Tier 0 node with significant security implications.

Created by

process_sso_node in lib/preprocess.py

Edges

The tables below list edges defined by the Jamf extension only. Additional edges to or from this node may be created by other extensions.

Inbound Edges

Edge Type	Source Node Types	Traversable
jamf_Contains	jamf_Tenant, jamf_Site	✅
jamf_Update_SSO_Settings	jamf_Account, jamf_DisabledAccount, jamf_Group, jamf_ApiClient, jamf_DisabledApiClient	✅

Outbound Edges

Edge Type	Destination Node Types	Traversable
jamf_SSO_Login	jamf_Account, jamf_DisabledAccount, jamf_Group	✅

Properties

Property Name	Data Type	Description
ssoEnabled	boolean	Whether SSO is enabled
idpUrl	string	Identity Provider URL
idpProviderType	string	Type of identity provider
entityId	string	SAML entity ID
groupAttributeName	string	Attribute name for group mapping
groupRdnKey	string	RDN key for group lookups
siteID	string	Site ID (always “-1” for global)
Tier	integer	Security tier classification (0)
name	string	Name of the SSO integration
enrollmentSsoConfig	string	Enrollment SSO configuration

Relationship Diagram