---
title: Configuring UEM with Jamf in Ivanti Access
slug: access-guide/configuring-uem-with-jamf-in-ivanti-access
docTags: 
createdAt: 2026-10-09T06:41:06.980Z
---

Ivanti Access integrates with Jamf (UEM vendor) to provide Zero Sign-on capability for desktops or laptops managed by them.

**Prerequisites**

- Verify that you provide the CA signer certificate from the 3rd party UEM used for the identity certificate in the managed desktops.
- Verify that you have the Desktop Identity Certificate CA referenced in Certificate based Single Sign On (Profile >Federation).
- Download the PKG file from Ivanti support site.

**Procedure **

1. Login to Access > UEM > 3rd Party UEMs.
2. Click Connect UEM.
3. Select Jamf.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/7g5CtdHK_iVBxY2A_yeS0_zsojamf.png" position="flex-start" size="100" width="980" height="404" initialPath="../Resources/Images/ZSOJamf.png" githubPath="Resources/Images/ZSOJamf.png" darkWidth="980" darkHeight="404" showCaption="false" indent="1"}

4. Enter the following details:
   1. Enter a Name.
   2. Click Add Certificate under Desktop Identity Certificate CA.
5. Enter the Certificate Name and add the certificate.
   Or
   Paste the certificate.
   Only PEM and CER file types are allowed.


::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/ods5DBT-hIUixKVn4ckFo_zsoaddcertificate.png" size="51" isUploading="false" initialPath="../Resources/Images/ZSOAddCertificate.png" githubPath="Resources/Images/ZSOAddCertificate.png" width="512" height="411" darkWidth="512" darkHeight="411" showCaption="false" indent="1"}

6. Click Done.
7. Click Next.
8. (Optional) Enter the Management Check details.
   Check whether desktop is registered to Jamf and check compliance if smart group is provided.
   - Enable to toggle for "Verify desktop is managed by Jamf and limit access to only managed desktops".
     Enabling this option performs a check during Authenticate registration and authentication to service providers.
   - Enter the Tenant URL.
   - Username
   - Password


::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/C413fPTQWQScpRa2F2Ebp_zsojamf1.png" size="82" isUploading="false" initialPath="../Resources/Images/ZSOJamf1.png" githubPath="Resources/Images/ZSOJamf1.png" width="817" height="530" darkWidth="817" darkHeight="530" showCaption="false" indent="1"}

9. (Optional) Enter the compliance criteria using Smart Group to enable restricted access to service providers.
   Use the Zero Sign-on rule to enforce that only desktops compliant with this criteria are able to access the service providers governed by the policy.
10. Click Done.
11. Under UEM > 3rd Party UEMs, the Jamf instance is created.
12. Click **Download Plist** and save the XML as a .plist file to upload in Jamf.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/ERBppxiUHESFURNJLHE1Q_image.png" size="80" isUploading="false" width="1428" height="893" darkWidth="1428" darkHeight="893" position="flex-start" showCaption="false" indent="1"}

**Next steps** 

- [Configuring Authenticate on Jamf](docId\:Bn0MWnRm8eNqDAJ-1OIFD)