Zluri Mac Agent Deployment and Authentication using an MDM

Mac Agent Version: 3.2.3


Mac Versions tested on : Ventura[13.4] , Big Sur[11.0], Monterey[12.6]

Step 1: Passing the Organization Token

Deploy a Script from the MDM which creates a file and writes the organization token into the file into all the devices that will have the Zluri Desktop Agent.

Questions:

What is an Organization Token [org_token]?

It is a unique identifier for every organisation in Zluri


Where to find your Organization Token in Zluri?

Go to the “Sources” Module and Click on “Agents.” On the Agents Overview Page, you can copy your Organization Token




Step 2: Installation of the Zluri Agent 

Deploy the Zluri Desktop Agent as an application to all devices.


App link

Mac: 

https://zluri-test-agents.s3.us-west-2.amazonaws.com/zluri-3.2.3.pkg

Step 3: Authentication of the Zluri Agent

Once the file with the organization token and the Zluri agent are installed in the devices, the Zluri Agent in all the devices will be authenticated with your organization token and will be listed in the Sources->Agents->Desktop Agents





User Authentication:

Once the devices authenticated with the organization token are listed under the “Desktop Agents Page” under the “Agents” module in the Zluri platform, user authentication can be done in the following ways:


  • Manual Mapping of the user to the device

    • On the Desktop Agents Page in the Agents Page, admins can manually map the device to a user in the “User” Column

  • Integration Mapping:

    • If the organization is using any of these MDMs [Jamf Pro, MS Intune, Kandji]

    • We get the device-to-user mapping information from these MDM integrations; with this, we will map the users to their devices

  • CSV upload

    • This is still in development

    • But can be handled by the Zluri Team

    • A CSV with user-to-device mapping is sent to the Zluri team; the mapping will be handled 


Restarting the first time after installation will be the best-case scenario.

FAQs:

MDMs Zluri supports with the script?

For Mac: Kandji 

Soon, for Jumpcloud, Jamf Pro


Can I remap a device to some other User?

Yes, when you hover on the User, you will see an edit option and on clicking that you should be able to remap 


How much time does it take for any action taken on the dashboard to reflect on the Agent?

1 hour(60 minutes)


Can the end user Logout?

No, the end user is not allowed to logout


Can the end user Quit from the application?
No, the end user is not allowed to quit the application

Can I unmap a User mapped?

Yes, in the Desktop Agents Page, we have the “Actions” column, there we have an option to unmap


What other actions are available for a device?

“Remove from org”, which the agent is completely logged out from both user and organization authentication


An admin mode is introduced, which is activated with a hotkey; only then logout, quit, and force restart the agent is possible → preferred not to be shared with all the users


Note: For now, both Integration Mapping and Bulk Upload of a CSV for Mapping will be handled by the Zluri team; the development for the UI flow for Bulk Upload and the Integration Mapping to be triggered immediately after the entries on the “Desktop Agents” Page is in progress and we will soon have this on the platform.

References:

Mac agent deployment viaKandji:

Documentation:

Mac Agent Deployment: Kandji


Can’t find what you are looking for? Let us help you!

Zluri Mac Agent Deployment and Authentication using an MDM

Modified on Tue, 05 Dec 2023 at 05:10 PM

Mac Agent Version: 3.2.3


Mac Versions tested on : Ventura[13.4] , Big Sur[11.0], Monterey[12.6]

Step 1: Passing the Organization Token

Deploy a Script from the MDM which creates a file and writes the organization token into the file into all the devices that will have the Zluri Desktop Agent.

Questions:

What is an Organization Token [org_token]?

It is a unique identifier for every organisation in Zluri


Where to find your Organization Token in Zluri?

Go to the “Sources” Module and Click on “Agents.” On the Agents Overview Page, you can copy your Organization Token




Step 2: Installation of the Zluri Agent 

Deploy the Zluri Desktop Agent as an application to all devices.


App link

Mac: 

https://zluri-test-agents.s3.us-west-2.amazonaws.com/zluri-3.2.3.pkg

Step 3: Authentication of the Zluri Agent

Once the file with the organization token and the Zluri agent are installed in the devices, the Zluri Agent in all the devices will be authenticated with your organization token and will be listed in the Sources->Agents->Desktop Agents





User Authentication:

Once the devices authenticated with the organization token are listed under the “Desktop Agents Page” under the “Agents” module in the Zluri platform, user authentication can be done in the following ways:


  • Manual Mapping of the user to the device

    • On the Desktop Agents Page in the Agents Page, admins can manually map the device to a user in the “User” Column

  • Integration Mapping:

    • If the organization is using any of these MDMs [Jamf Pro, MS Intune, Kandji]

    • We get the device-to-user mapping information from these MDM integrations; with this, we will map the users to their devices

  • CSV upload

    • This is still in development

    • But can be handled by the Zluri Team

    • A CSV with user-to-device mapping is sent to the Zluri team; the mapping will be handled 


Restarting the first time after installation will be the best-case scenario.

FAQs:

MDMs Zluri supports with the script?

For Mac: Kandji 

Soon, for Jumpcloud, Jamf Pro


Can I remap a device to some other User?

Yes, when you hover on the User, you will see an edit option and on clicking that you should be able to remap 


How much time does it take for any action taken on the dashboard to reflect on the Agent?

1 hour(60 minutes)


Can the end user Logout?

No, the end user is not allowed to logout


Can the end user Quit from the application?
No, the end user is not allowed to quit the application

Can I unmap a User mapped?

Yes, in the Desktop Agents Page, we have the “Actions” column, there we have an option to unmap


What other actions are available for a device?

“Remove from org”, which the agent is completely logged out from both user and organization authentication


An admin mode is introduced, which is activated with a hotkey; only then logout, quit, and force restart the agent is possible → preferred not to be shared with all the users


Note: For now, both Integration Mapping and Bulk Upload of a CSV for Mapping will be handled by the Zluri team; the development for the UI flow for Bulk Upload and the Integration Mapping to be triggered immediately after the entries on the “Desktop Agents” Page is in progress and we will soon have this on the platform.

References:

Mac agent deployment viaKandji:

Documentation:

Mac Agent Deployment: Kandji


Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select atleast one of the reasons

Feedback sent

We appreciate your effort and will try to fix the article