Skip to main content

Jamf Integration with ZTXGate

Organizations that manage Apple endpoints with Jamf can bring available device-management posture into ZTXGate access policy.

This lets the access decision consider both the identity of the user and the management state of the device before a protected resource is exposed.

Use Jamf Posture as a Policy Input​

In connected environments, ZTXGate can use supported Jamf posture information when deciding whether an enrolled endpoint should reach a selected resource.

A policy can combine Jamf-derived device state with:

  • user identity and role
  • ZTXGate device enrollment
  • resource sensitivity
  • time, location, and approval conditions
  • step-up authentication requirements

Device Enrollment Is Still Separate​

Jamf device management and ZTXGate enrollment serve different purposes.

ZTXGate enrollment identifies the endpoint inside the access system. Jamf contributes management or compliance context about that endpoint. ZTXGate then applies the access policy to the requested resource.

Continuous Enforcement​

Device posture can change after a user signs in. ZTXGate can continue evaluating relevant policy conditions and revoke access if the endpoint no longer satisfies the required posture.

That makes device-management state part of the access lifecycle rather than a static inventory attribute.

Strong Authentication for Sensitive Access​

For sensitive applications, Jamf posture can be combined with additional verification. When licensed, integrated ZTXBAS provides phishing-resistant biometric authentication and can operate inside fully air-gapped ZTXGate deployments.

External Jamf posture naturally requires connectivity to the corresponding Jamf service.

Fits Customer- and MSP-Operated ZTNA​

ZTXGate can be operated by the customer or an MSP and does not require a mandatory CoreZT-hosted cloud control plane. Organizations can keep access enforcement in their own infrastructure while using Jamf as an external posture source where connectivity exists.

Explore all integrations · Identity & Device Trust · Start Free Trial