---
title: Configuring UEM with Jamf in Ivanti Access
slug: access/guide/configuring-uem-with-jamf-in-ivanti-access
docTags: 
createdAt: 2026-09-07T09:11:00.348Z
---

Ivanti Access integrates with Jamf (UEM vendor) to provide Zero Sign-on capability for desktops or laptops managed by them.

Before you begin 

- Verify that you provide the CA signer certificate from the 3rd party UEM used for the identity certificate in the managed desktops.
- Verify that you have the Desktop Identity Certificate CA referenced in Certificate based Single Sign On (Profile >Federation).
- Download the PKG file from Ivanti support site.

**Procedure **

1. Login to Access > UEM > 3rd Party UEMs.
2. Click Connect UEM.
3. Select Jamf.

::Image[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/xz5RnuWwWLBKQTWHFv2VV_zsojamf.png" position="flex-start" size="80" width="980" height="404" initialPath="../Resources/Images/ZSOJamf.png" githubPath="HTML5/Resources/Images/ZSOJamf.png" showCaption="false"}

4. Enter the following details:
   1. Enter a Name.
   2. Click Add Certificate under Desktop Identity Certificate CA.
5. Enter the Certificate Name and add the certificate.
   Or
   Paste the certificate.
   Only PEM and CER file types are allowed.
   :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/fJk6NNQjvEl_uzIHkyNCK_zsoaddcertificate.png" alt caption size="51" width="512" height="411"}
6. Click Done.
7. Click Next.
8. (Optional) Enter the Management Check details.
   Check whether desktop is registered to Jamf and check compliance if smart group is provided.
   - Enable to toggle for "Verify desktop is managed by Jamf and limit access to only managed desktops".
     Enabling this option performs a check during Authenticate registration and authentication to service providers.
   - Enter the Tenant URL.
   - Username
   - Password
     :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/ae28sa-gxTudHQGn9VXPr_zsojamf1.png" alt caption size="80" width="817" height="530"}
9. (Optional) Enter the compliance criteria using Smart Group to enable restricted access to service providers.
   Use the Zero Sign-on rule to enforce that only desktops compliant with this criteria are able to access the service providers governed by the policy.
10. Click Done.
11. Under UEM > 3rd Party UEMs, the Jamf instance is created.
12. Click **Download Plist** and save the XML as a .plist file to upload in Jamf.
    :inlineImage[]{src="https://api.archbee.com/api/optimize/V3jJx_afLEcmDauLTrzss/vXZ4u9xBHwUpxkz_a7you_zsojamf2.png" alt caption size="80" width="1680" height="893"}

Next steps 

- [Configuring Authenticate on Jamf](docId\:wzj1bsomqs0oaC09nQa2D)