Sync Apple devices from Jamf Pro into SimpleAMS

SimpleAMS pulls Apple devices from Jamf Pro over the Jamf Pro API using OAuth client credentials. Two steps in Jamf, two steps in SimpleAMS.

1. Create an API role in Jamf

1. In Jamf Pro, go to Settings → System → API roles and clients → API Roles.
2. Click New, name it "SimpleAMS read-only".
3. Grant the role these privileges (read-only is enough):
   • Read Computers
   • Read Mobile Devices
   • Read Users
4. Save.

2. Create an API client

1. Switch to API Clients tab → New.
2. Name it "SimpleAMS", attach the role you just created.
3. Set Access token lifetime to 30 minutes (default).
4. Click Save. Jamf generates a client ID and a client secret - copy both, the secret is shown only once.

3. Plug into SimpleAMS

1. Go to Settings → Integrations → Jamf Pro.
2. Paste:
   • Jamf Pro URL: https://yourorg.jamfcloud.com (no trailing slash)
   • API client ID: from step 2
   • API client secret: from step 2
3. Tick Enable this integration and save.

4. Run the first sync

Click Sync now on the Jamf card. Within a minute, your asset list at /assets will be populated with one row per Jamf device: model, serial, asset tag (we use Jamf's asset tag if set, else the serial), assigned user. The sync runs daily after that.

5. What gets imported

• All computers and mobile devices the role can see.
• Manufacturer is set to Apple.
• Status maps from Jamf's check-in/inventory state to Deployed for everything seen recently, Broken for "missing" / "out of contact" records.

Gotchas

• Jamf cloud accounts may need to enable the API service in Settings → System → API before the role tab is populated.
• If the API client lifetime is too short (under 5 min), Jamf invalidates the token before we paginate a large fleet. Keep it at the 30-minute default.
• Sync respects soft-deleted rows in SimpleAMS - if you've trashed an asset that's still in Jamf, the sync doesn't resurrect it. Restore from /trash if needed.