The following guide is designed to give you a detailed overview of each tab of the integration and the tab’s intended purpose. After installing Jamf School and running your first sync. Your next steps are to:
Enable how your assets are created and updated within iiQ under the General Settings Tab.
Map the location of assets under the Location Mapping Tab.
Map the model for your assets under the Model Mapping Tab.
Run a full sync under the Overview Tab.
Incident IQ Academy:
Visit the Incident IQ Academy for in-depth training and how-to videos teaching you on Configuring Asset Management Integrations
You can access the Jamf School Integration app by selecting Incident IQ Apps > Apps Management when installed. This will take you to your Installed Apps page, where you can select the Manage button to access the Jamf School Integration management page.
Overview Tab
The Overview Tab allows you to quickly review the status of the most recent sync between Incident IQ and Jamf School. While syncs will automatically run overnight, you have three additional options:
Start Full Sync - manually start a new sync.
Re-Run Last Sync - rerun the very last sync.
Push Data - if you have set up write-back functionality, push the data back to your asset integration form iiQ. Please see the section below for more details on creating custom value fields that are pushed from iiQ to your asset management integration.
Additionally, you can use the View Details button to take you directly to the Sync History tab where you can review the count of assets updated, added, or skipped over during the most recent sync.
General Settings Tab
The General Settings tab has the settings that control when information is brought in or updated automatically, as well as field mappings between the Jamf School and Incident IQ. As such, you can find the following settings here:
Authentication fields to enter the Jamf School Network ID, API Key, and Instance Url.
Options that control if assets are automatically created, updated, and deleted during system syncs.
The ability to turn on automatic room assignment for assets if you store this data in Jamf.
Custom field asset mapping options to pull in additional data for use in asset filters and custom view columns
An option to enable the use of remote asset features available in Jamf directly on an asset detail’s page by administrators and agents with the correct permissions
The Authentication section is where you enter the following fields for Jamf School authentication information:
Network ID
API Key
Instance Url
The Mapping section manages what data is created and updated in Incident IQ based on data coming from Jamf. This includes:
Create Asset: Selecting this will automatically create assets in iiQ to match any new device discovered in Jamf during a sync.
Update Asset: Selecting this will automatically update assets in iiQ to match any updates to a device’s data discovered in Jamf during a sync.
Update Custom Fields: This option will only allow new information being pulled into custom fields to update during a sync.
Delete Asset: Selecting this will automatically delete assets in iiQ to match any asset deletions that have occurred in Jamf during a sync.
Next, under the Import Options section, you can enable the Create Rooms option. This will automatically create rooms associated with assets in Jamf School if these rooms do not already exist in Incident IQ. Additionally, the Update Asset Owner option will automatically update the owner in Incident IQ based on the primary user in Jamf School.
The Matching Rules section controls how devices are matched between the JamfSchool and Incident IQ.
These options are read-only for customers and editable by iiQ Admin Employees. This includes the ability to do the following:
Only use serial number when matching assets between JamfSchool and iiQ
When matching assets between JamfSchool and iiQ, prefer serial number instead of asset tag
Skip creation of assets in iiQ when the asset in JamfSchool does not have a serial number
Only allow one asset for each serial number to be imported
Restore a deleted asset in iiQ if an asset in JamfSchool can be matched
The Map custom values section allows you to select additional values you want to be imported and map them to default or custom fields in iiQ. This will enable you to pull custom data fields and view column options. Click on the Add button.
Next, fill out the following field mapping options:
Please note that there may be pre-configured mapping and can not be changed.
Select the custom value
Set the Map Direction
The following fields are only supported for syncing from iiQ to Jamf Schools: Asset Tag, Notes, owner:username, and owner:email.
Write-back is only supported if a user has a corresponding account in Jamf School that is an exact match to the username or email address being pushed from the owner of the device in iiQ.Jamf to Incident IQ
Incident IQ to Jamf
Both directions (if both, data will push from Incident IQ to Jamf first.)
Select the iiQ field the custom value should map to. You can map to the default field or map to a custom field.
If you map to a Custom Field, you will need to set a field name, select a field type (text, number, or date), and set whether the field information needs to be searchable through filters.
The last section is the Remote Device Actions. In Incident IQ, you can enable remote device actions that administrators and agents with the correct permissions can access directly on an asset’s details page. These options include:
jamfSchool: Move a Device: Update the location of a Jamf School-managed device.
jamfSchool: Refresh Inventory: Allow a user to schedule a full inventory refresh of the given device.
jamfSchool: Remote Restart Device: Allow a user to restart a Jamf School-managed device remotely.
jamfSchool: Remote Unenroll Device: Allow a user to schedule the removal of the management profile from a Jamf School managed device.
jamfSchool: Remote Wipe Device: Allow a user to wipe a Jamf School-managed device remotely.
jamfSchool: Restore Device: Allow a user to restore a Jamf School-managed device remotely.
jamfSchool: Trash a Device: Allow a user to trash a Jamf School-managed iOS device remotely.
jamfSchool: Update the eSIM Cellular Plan: Query a carrier URL for active eSIM cellular-plan profiles.
Please see the section below for more details on enabling device actions based on user roles.
Location Mappings Tab
This tab allows you to select or modify your current location mappings between iiQ and Jamf School. You can choose to automatically assign a device to a default location in Incident IQ if it does not match any location mappings set. This is especially important if you use the Jamf School integration to create assets because assets must automatically have a location.
Location is required for an asset to be created in iiQ. The way this works during a sync is as follows:
If an asset matches the location mapping, then the asset will get created and assigned to the corresponding location the mapping is set to.
If an asset does not match a location mapping, or no location mappings are present, and a default location is selected, then the asset will be created and assigned to the default location.
If an asset does not match a custom mapping, no custom mappings are present, and no default location is set, then the asset will not be created during a sync.
The Custom Mapping Options allow you to choose how you would like devices to map in iiQ. When Location Name is selected, you will be presented with a list of locations currently in the system. You can choose Auto-Map Location Names to match location names between iiQ and Jamf School. Alternatively, you can manually search for and select your location assignments if needed.
When mapping, if the full name is not visible, simply hover over the name to view the complete name
Map by Owner’s Location will only be available if you enable one of the following Site Options. If you select Map by Owner’s Location this will automatically assign an asset location to the owner's location. Navigate to Site Options to enable the different settings:
Model Mappings Tab
This tab allows you to select or modify your current model mappings between iiQ and the Jamf School. You can use the Auto-Map Models button to automatically attempt to match models in your list of devices with existing models in iiQ.
Alternatively, you can manually select what model your device should map to using the drop-down menus to the right of each listed device.
If your device will not auto-map and is unavailable from the drop-down options, it most likely does not currently exist in iiQ. In this case, select the Create New Model button on the right of the device mapping to create and activate this model during your data sync automatically.
Sync History Tab
This tab lets you view your sync history between iiQ and the Jamf Schools. Every sync, whether completed successfully or not, is logged for reference purposes and available for review in the View details of a sync list.
Clicking on any sync, in particular, will open that sync’s details. You can review the list of what devices were updated, created, deleted, or skipped during the sync. Additionally, you can narrow down your view by using the filter options at the top of the list.
Asset History Tab
The Asset History tab allows you to search for basic information on any device in your Jamf School. Enter a valid serial number in the Search for asset field to begin your search.
Once you’ve selected a device, you’ll be able to see the following Jamf Schools information:
External ID
Model
Owner Email
Organizational Unit
Serial Number
Location Name
You’ll also see a list of actions applied to this device during recent system syncs.
Remote Device Actions
Under the General Settings tab at the bottom of the page, you can enable remote device actions that administrators and agents with the correct permissions can access directly on an asset’s details page in Incident IQ. These options include:
Remote Edit Location of Device: Update the location of a Jamf School-managed device.
Remote Edit eSIM Cellular Plan: Query a carrier URL for active eSIM cellular-plan profiles.
Remote Refresh Inventory: Allow a user to schedule a full inventory refresh of the given device.
Remote Restart Device: Allow a user to restart a Jamf School-managed device remotely.
Remote Restore Device: Allow a user to restore a Jamf School-managed device remotely.
Remote Restore Device: Allow a user to restore a Jamf School-managed device remotely.
Remote Unenroll Device: Allow a user to schedule the removal of the management profile from a Jamf School managed device.
Remote Wipe Device: Allow a user to wipe a Jamf School-managed device remotely.
Please note, administrators are given full access to all remote features permissions by default. However, each remote feature listed above is controlled by individual permission. This makes it possible to customize which permissions an agent has access to without needing to give them full access to all of the remote features. These permissions can be found underneath the App Specific section on policies and individual user permissions pages.
You will have access to perform these actions on the asset details page.
---
Hannah Bailey - Director, Customer Engagement