Source: https://joinfinn.com/integrations/jamf

# Jamf

## Jamf + Finn.

Jamf integration with Finn. Jamf manages and secures Apple devices used by employees and organizations.

Business function: IT and identity.

## What you can do with Jamf.

Jamf manages and secures Apple devices used by employees and organizations.

### Prepare a new employee's managed computer

Finn completes the device-administration work behind a new hire's setup, bringing the assigned computer into the right management groups and following the application results.

**Typically handled by:** Apple device onboarding administrator

**Starts when:** An approved hire receives an enrolled computer that needs the role's standard setup.

#### What Finn handles

1. Match the Workday employee and ServiceNow equipment request to the device inventory in Jamf Pro.
2. Apply the established role's device-group and configuration assignments without granting unrelated access.
3. Start the required managed application deployment and follow enrollment, configuration, and installation results.
4. Send the employee setup instructions and record the ready device and any specific failure in the onboarding case.

**The result:** The assigned computer has a documented setup result and the employee's readiness is visible to the onboarding team.

### Deliver requested software through its installation result

Finn takes an employee's software request from its business approval to the installed application, using the device manager as the execution owner.

**Typically handled by:** Endpoint application fulfillment team

**Starts when:** An employee requests an application from the service catalog.

#### What Finn handles

1. Confirm the requested application, employee, managed device, and the software owner's approval in ServiceNow.
2. Assign the application's existing deployment to the correct Jamf Pro device or user group.
3. Follow the installation result and provide any employee action required by the deployment.
4. Confirm the application is available and complete the service request with the assignment and installation evidence.

**The result:** The software request ends with a reported installation outcome rather than an assignment that was never checked.

### Run an operating-system update campaign

Finn coordinates the complete administrative cycle of an OS update, from the approved device population through employee communication and installation follow-up.

**Typically handled by:** Apple endpoint update coordinator

**Starts when:** The endpoint owner approves an operating-system version and rollout window.

#### What Finn handles

1. Identify eligible Jamf Pro devices and the rollout's agreed groups, timing, and restart requirements.
2. Create or assign the update plan through the product's supported update-management process.
3. Notify employees and follow each targeted device's update progress during the rollout.
4. Record successful versions in the ServiceNow change and open focused follow-up for devices that did not complete.

**The result:** The update campaign has device-level results and owned exceptions, without assuming every targeted machine was online or updated.

### Apply a standard device configuration change

Finn takes a reviewed device configuration through assignment and result checking, connecting the change decision to what the managed computers actually report.

**Typically handled by:** Endpoint configuration administrator

**Starts when:** IT approves a change to an established device profile or management setting.

#### What Finn handles

1. Record the requested profile change, affected Apple devices, and approval in ServiceNow.
2. Apply the reviewed profile or policy assignment to the selected Jamf Pro device group.
3. Follow device check-in and configuration reporting, coordinating any employee action the change requires.
4. Check the expected setting and update the change record with completed devices and specific errors.

**The result:** The configuration change is deployed and its reported result is attached to the original authorization.

### Contain a lost managed device

Finn executes the device actions authorized by the security response and connects their results to the identity team's separate account-containment work.

**Typically handled by:** Endpoint security response team

**Starts when:** An employee reports a lost company device and security authorizes containment.

#### What Finn handles

1. Match the report to the correct Jamf Pro device and confirm the exact action authorized by the security owner.
2. Issue the supported lock or other approved containment command for that device and operating system.
3. Track the device's acknowledgment while connected Okta or Microsoft Entra handles separately authorized account actions.
4. Record device and identity results in the security case, keeping an offline device's uncompleted action explicit.

**The result:** The incident contains evidence of what the device acknowledged and what account containment completed, without claiming universal instant protection.

### Complete a device return and reassignment

Finn handles the administrative work of taking a returned computer out of its previous assignment and preparing it for the next approved employee.

**Typically handled by:** IT device lifecycle administrator

**Starts when:** The asset team confirms receipt of a returned computer and authorizes its reuse.

#### What Finn handles

1. Match the returned serial number to Jamf Pro inventory and the former employee's ServiceNow asset record.
2. Obtain the required data-retention and erase authorization before starting any destructive reset.
3. Run the supported reset or reprovisioning process, then apply the next employee's approved setup assignments.
4. Follow the reported device results and update the asset record with the completed ownership and readiness state.

**The result:** The returned computer has a documented preparation result for reassignment, with data-handling decisions explicitly recorded.

### Repair a failed application deployment

Finn investigates the deployment failure behind an employee's software request and completes the documented correction without creating a new disconnected support journey.

**Typically handled by:** Endpoint application support specialist

**Starts when:** Jamf Pro reports that a required application did not install on a managed device.

#### What Finn handles

1. Read the installation status, device inventory, targeting, and the deployment's documented prerequisites.
2. Identify the actionable cause, such as an incorrect assignment or a prerequisite covered by an existing repair.
3. Apply the correction within the original authorization and restart the deployment through its supported mechanism.
4. Check the new installation result and update the original ServiceNow request with completion or the precise remaining issue.

**The result:** The employee's original software request reaches an evidenced deployment result with its troubleshooting history preserved.

### Retire software that the application owner has removed

Finn completes the device portion of an approved software retirement, following removal results and keeping it separate from any application-account or subscription decision.

**Typically handled by:** Endpoint software lifecycle team

**Starts when:** The application owner approves removal of a managed application from a defined device group.

#### What Finn handles

1. Match the retirement decision to the application's Jamf Pro deployment and affected devices.
2. Remove the applicable deployment assignment or apply the supported managed-app uninstall action.
3. Follow the device-reported removal results and coordinate any necessary employee restart.
4. Record completed removals in ServiceNow while the identity and purchasing owners handle separate access or billing changes.

**The result:** The software retirement has device-level removal evidence, without treating uninstalling an app as closing its subscription or account.

## Connection setup

Contact Finn to discuss the records your workflow needs and the actions you want it to perform.

Your team chooses what Finn can access, what agents can change, and when a person must approve the work. The connection needs the appropriate account access and permissions from Jamf.

## Explore Finn

- [Agents](https://joinfinn.com/agents): Help customers. Work with your team. Finish the job.
- [Systems](https://joinfinn.com/systems): Business apps for the work behind the conversation.
- [AI Gateway](https://joinfinn.com/ai-gateway): Control connected AI apps, models, access, and spending.

[All integrations](https://joinfinn.com/integrations)

[Discuss this integration](https://joinfinn.com/contact)

[Discuss your workflow](https://joinfinn.com/contact) · [How it works](https://joinfinn.com/demo/app/#/w/borough/overview) · [Get started](https://joinfinn.com/app/#/signup)