The Mac enterprise community has been excited about Apple's development of the Platform SSO framework for user identity management. Now that many of these features are available with support from Jamf and Okta, see how Salesforce will be implementing PSSO to improve the new hire onboarding experience while also increasing security behind the scenes.
Identity and Network Access
Unlock the power of Identity and Network Access at JNUC with this specialized agenda. Delve into the latest identity management solutions, streamline user authentication, and learn how to implement Zero Trust frameworks effectively. Discover how to secure remote access, integrate with SSO and MFA, and enforce network policies across your Apple ecosystem.
Identity and Network Access
Select the 
icon within any available time slot to add a session to your agenda. To reserve personal time, click the + Add Personal Time button.
Identity and Network Access
Unlock the power of Identity and Network Access at JNUC with this specialized agenda. Delve into the latest identity management solutions, streamline user authentication, and learn how to implement Zero Trust frameworks effectively. Discover how to secure remote access, integrate with SSO and MFA, and enforce network policies across your Apple ecosystem.
Sessions
Breakout Session
- Breakout SessionMac WorkflowsEnd User ExperienceOtherGovernmentHigher EducationAviation/TransportationEnterprise300 Level - AdvancedIn-PersonYes - Show in Prod CatalogMacJamf ProThursday, Sep 2410:00 a.m. Thursday, Sep 24
, Senior Endpoint Engineer, Salesforce, Inc.
- Thursday, Sep 24th10:15 am - 11:00 am CDT3501A
- Breakout SessionIntegrations and APIsOtherHigher Education200 Level - IntermediateIn-PersonYes - Show in Prod CatalogMaciPadiPhoneJamf ProOther3:00 p.m. Thursday, Sep 24Thursday, Sep 24Many higher education institutions delay identity and access management (IAM) efforts while waiting for everything to be “ready.” In this session, a university IT practitioner from New Mexico State University and a Jamf Account Executive share an honest look at starting an IAM journey with RapidIdentity before and after full go‑live. We’ll cover the identity gaps that drove action, early implementation lessons and how identity began bridging long‑standing gaps with Apple and Jamf management. Attendees will leave with practical insight on moving forward with IAM without waiting for perfection.
, Enterprise System Architect, New Mexico State University
, Senior Strategic Account Executive, Jamf
- Thursday, Sep 24th03:00 pm - 03:45 pm CDT2103A
- Breakout SessionEnd User ExperienceJamf TeacherJamf StudentHigher EducationK-12 Education200 Level - IntermediateIn-PersonYes - Show in Prod CatalogMaciPadJamf SchoolOtherFriday, Sep 259:00 a.m. Friday, Sep 25Every Apple admin has the same dream: hand a device to any student or teacher and have it automatically configured for that person, the right apps, the right configuration, deployed with a purpose. That dream runs on smart groups powered by identities! In this session we'll explore why identity is the foundation of device management in K-12 environments. What happens to your carefully built workflows when that identity data is wrong or missing, and how to use Jamf to think beyond the device. You'll walk away with a clear understanding of Jamf's identity stack for education and how pairing device automation with identity automation makes your deployments work hard so that you don’t have to.
, Senior Consulting Engineer, Jamf
, Senior Consulting Engineer, Jamf
- Friday, Sep 25th09:00 am - 09:45 am CDT2103A
- Breakout SessionMac and Mobile ComplianceIntegrations and APIsOtherEnterprise200 Level - IntermediateIn-PersonYes - Show in Prod CatalogMaciPhoneJamf ConnectOtherThursday, Sep 2410:00 a.m. Thursday, Sep 24As organizations move toward "Private-by-Default" cloud architectures, the challenge of providing seamless access to developers and admins grows. Traditional VPNs are often clunky, and public endpoints are a security risk. This session provides a technical blueprint for implementing Identity-Aware Cloud Infrastructure by integrating Jamf Connect Zero Trust Network Access (ZTNA) with Azure Private Endpoints. We will explore how any organization can eliminate the need for public-facing endpoints by leveraging Jamf Trust as a secure gateway ensuring that users can only reach the Azure Portal, CLI and internal Kubernetes clusters when they are on a trusted, managed device. We will cover the networking "magic" of Site-to-Site IPsec interconnects between Jamf Security Cloud and Azure VNETs, and how to define access policies that make private resources feel local.
, Engineering Manager, Jamf
- Thursday, Sep 24th10:15 am - 11:00 am CDT2104A
- Breakout SessionMac WorkflowsEnd User ExperienceGovernmentHigher EducationK-12 EducationAviation/TransportationEnterprise200 Level - IntermediateIn-PersonYes - Show in Prod CatalogMaciPhoneJamf ProJamf ProtectFriday, Sep 259:00 a.m. Friday, Sep 25Stay ahead of the curve. This session covers the latest Platform SSO features coming in macOS 27 and how Jamf delivers day-one support for Apple's newest identity capabilities. We'll break down what's changing, what it means for your organization and how to put these features to work from the start.
, Endpoint Engineer, Universal Music Group
, Solutions Engineer, Jamf
- Friday, Sep 25th09:00 am - 09:45 am CDTGrand Ballroom B
- Breakout SessionOther200 Level - IntermediateIn-PersonYes - Show in Prod CatalogMacJamf ProJamf Connect10:00 a.m. Friday, Sep 25Friday, Sep 25Passwordless. Password sync. Phishing-Resistant. FIDO. Hello? How exactly do our Mac devices fit in an Entra ID world? It's no wonder few of us have deployed PSSO in our environments. Yet the longer we wait, the longer our identity colleagues wait for the Mac to catch up and the longer our corporate resources are exposed. It's time to cut through the clutter, move beyond passwords and start deploying "phishing-resistant passwordless authentication" (aka passkeys) now.
, Senior Mac Platform Engineer, Sophos LTD
- Friday, Sep 25th10:15 am - 11:00 am CDTGrand Ballroom B
- Breakout SessionMobility WorkflowsEnd User ExperienceSetup and Reset with Single LoginHigher EducationK-12 Education100 Level - IntroductoryIn-PersonYes - Show in Prod CatalogMaciPadJamf ProJamf School4:00 p.m. Thursday, Sep 24Thursday, Sep 24Managing Apple devices in K12 has never been more demanding, but two technologies are changing the game for school IT admins: Platform Single Sign-On (PSSO) and Declarative Device Management (DDM). In this session, we'll break down both from the ground up, no acronym left behind, whether you're hearing these terms for the first time or already knee-deep in Jamf School blueprints and identity workflows. You'll learn how DDM shifts your fleet from a reactive, poll-and-respond model to one where devices proactively report their own state and autonomously apply configurations — fewer check-ins, faster compliance and real-time visibility without the chase. We'll also demystify PSSO and show how it integrates authentication at the macOS system level, letting students and staff sign in once and seamlessly access everything they need throughout their day. Smarter devices, simpler logins, and less time firefighting — that's the ABCs of PSSO and DDM.
, Senior Consulting Engineer - Education, Jamf
, Senior Education Leadership Executive, Jamf
, Senior Sales Engineer, Jamf
- Thursday, Sep 24th04:15 pm - 05:00 pm CDTGrand Ballroom A2
- Breakout SessionEnd User ExperienceReporting & Risk ReductionOtherK-12 EducationEnterprise200 Level - IntermediateIn-PersonYes - Show in Prod CatalogMaciPadJamf ProJamf Connect11:00 a.m. Friday, Sep 25Friday, Sep 25After being notified by law enforcement that our SSL VPN was vulnerable to a pre-authentication exploit, I re-evaluated how remote access should work in a K-12 environment. This session walks through my transition from perimeter-based VPN access to Jamf Trust, including deployment across iPad, Mac and Windows in two schools with different network vendors and management models. I will share how I evaluated remote access risks, why Jamf Trust was selected over maintaining a VPN-based approach or adopting other Zero Trust solutions, and how I implemented Zero Trust Network Access as a solo administrator. Attendees will leave with practical lessons, deployment considerations and real-world insights they can apply in their own environments.
, Head of ICT, Hiroshima Setouchi High School
- Friday, Sep 25th11:30 am - 12:15 pm CDT3501A
- Breakout SessionMac WorkflowsEnd User ExperienceSetup ManagerHigher Education200 Level - IntermediateIn-PersonYes - Show in Prod CatalogMacJamf Pro11:00 a.m. Thursday, Sep 24Thursday, Sep 24San Diego State University transformed its endpoint deployment model by combining Apple’s zero-touch provisioning with Platform Single Sign-On (SSO) and Secure Enclave-backed authentication. Brian Lenz and Chris Potente will discuss SDSU’s journey to deliver secure, fully configured macOS devices to faculty, staff and students without IT intervention, while maintaining strong identity assurance and compliance. Attendees will gain a practical blueprint for integrating Apple School Manager, MDM, Platform SSO and hardware-backed security to modernize device lifecycle management in higher education.
, Endpoint Team Lead, San Diego State University
, Endpoint Systems Administrator, San Diego State University
- Thursday, Sep 24th11:30 am - 12:15 pm CDT2103A