---
schema_version: "1"
id: 9b42f6edfa43ee0e6d59df653f1a6597dc525ca05bf893c42c18cf5cf0926196
title: Create a Discovery Target for Jamf Pro
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/service/264-0-0/it_srvcs_discovery_create_jamf_trgt.md
canonical_url: https://help.salesforce.com/s/articleView?id=service.it_srvcs_discovery_create_jamf_trgt.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 49f2f724c6dbaaf216c8b9984d1b74fd3b74ef501186ee79e43878c8070b913a
description: Create a Jamf Pro discovery target to bring managed Apple device data into CMDB. Keep endpoint Configuration Items (CIs) accurate and up to date. Configure the integration connection, review field mappings, and run discovery using Salesforce Flow. Populate CMDB with managed Mac computer and mobile device data, and support IT operations that rely on accurate CI data.
products:
  - Service Cloud
  - Agentforce IT Service
release: "264"
---
# Create a Discovery Target for Jamf Pro

Create a Jamf Pro discovery target to bring managed Apple device data into CMDB. Keep endpoint Configuration Items (CIs) accurate and up to date. Configure the integration connection, review field mappings, and run discovery using Salesforce Flow. Populate CMDB with managed Mac computer and mobile device data, and support IT operations that rely on accurate CI data.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with Agentforce IT Service that have Discovery enabled.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d109469e74">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d109469e74 ">To manage discovery:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d109469e74 ">IT Service Asset Discovery</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d109469e74 ">To create and manage the Jamf connection:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d109469e74 ">Manage Integration Connections</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d109469e74 ">To create and activate the integration flow:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d109469e74 ">Manage Flow</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d109469e74 ">To use the integration template as a non-admin user:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d109469e74 ">App Framework Manage Template</td>

          </tr>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d109469e74 ">To keep connector usage unmetered:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d109469e74 ">Unmetered Base AI Usage for Service Desk permission set</td>

          </tr>
        </tbody>
      </table>

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-service-it_service-264-0-0-production-enus/0a574a10-4c7a-4681-aacf-0767f8beaad4/images/icon_important.png)

Important CMDB integrations are powered by MuleSoft flow connectors, which consume automation credits. Before you create a discovery target, assign the Unmetered Base AI Usage for Service Desk permission set to each user who creates or manages discovery targets. The permission set keeps the connector usage unmetered so that it doesn't count toward your credit consumption.

Complete these steps before you create the target.

- Turn on Jamf discovery in Salesforce Go. For more information, see [Set Up Discovery using Salesforce Go](https://help.salesforce.com/s/articleView?id=service.it_srvcs_discovery_setup_salesforcego.htm&release=264.0.0&type=5 "Swiftly enable Salesforce Discovery to automate asset identification and synchronization in just a few steps by using Salesforce Go. Use the guided setup experience to turn on the Discovery feature, install the agentless discovery application, and configure targets and credentials. Reduce manual setup and ensure accurate CMDB population with a single activation flow.").
- Make sure that the FlowIntegrationAddOn license is enabled for your org. Jamf discovery runs on Salesforce Flow.
- Create an API role and API client in Jamf Pro.

Create an API role and client in Jamf Pro to get the OAuth details for the Jamf connection. In the Jamf Pro admin console, complete these steps:

- Go to **Settings** | **System** | **API Roles and Clients**.
- Create an API role, and assign the Read Computers, Read Mobile Devices, and Read Licensed Software privileges.
- Create an API client, assign the API role, and enable the client.
- Capture the Client ID, and generate and copy the Client Secret.
- Note your Jamf Pro instance URL, such as `https://yourcompany.jamfcloud.com`.

For more information, see [API Roles and Clients in the Jamf Pro documentation](https://learn.jamf.com/r/en-US/jamf-pro-documentation-11.14.0/API_Roles_and_Clients).

1. From the App Launcher, find and select **CMDB and Service Graph**.
2. From the navigation panel, select **Discovery & Scanning**, and then select **Targets**.
3. Select **New**.
4. In Target Categories, select **MDM & Device Management**.
5. In Probe Types, select **Jamf**, and then select **Save and Continue**.
6. Enter a target name.
7. Optionally, enter a description.
8. Configure the Jamf connection.
    1. In Jamf Connection, select **New Connection**.
    2. Enter the connection details from your Jamf API client.
        
        | Field | Value |
        | --- | --- |
        | Connection Name | A descriptive name for the connection. |
        | Client ID | The Client ID from your Jamf API client. |
        | Client Secret | The Client Secret from your Jamf API client. |
        | URL | Your Jamf Pro instance URL, such as `https://yourcompany.jamfcloud.com`. |
        | Token URL | `https://{jamf-instance}/api/oauth/token` |
    3. Replace `{jamf-instance}` in the Token URL with your Jamf Pro instance hostname.
    4. Save the connection.
        
        The connections that you create appear in the Jamf Connection field.
    5. Test the connection to confirm that Salesforce can authenticate with Jamf Pro.
9. In Scan Frequency, select one of these options:
    
    | Option | Description |
    | --- | --- |
    | 60 Minutes | Refreshes device and software data every 60 minutes. |
    | Daily | Refreshes device and software data every day based on the schedule that you set. |
10. Turn on Enabled to activate discovery for the target.
11. Select **Next**.
12. On the Field Mapping page, review how CMDB fields map to Jamf fields for each device category. These are the default mappings. You can review the mappings on this page, but you can't edit them. To customize mappings, edit the flow after you create the target.
    
    1. Select the **Compute** tab to review mappings for Mac computers and installed software.
    2. Select the **Mobile Devices** tab to review mappings for mobile devices.
    
    For more information, see [Considerations for Mapping Jamf Fields to CMDB](https://help.salesforce.com/s/articleView?id=service.it_srvcs_discovery_jamf_field_mapping.htm&release=264.0.0&type=5 "Learn how Jamf device data maps to CMDB fields. See which fields identify devices and how CMDB formats certain values. Use these considerations to interpret discovered data correctly and to decide when to customize the mappings.").
13. Select **Save**.
14. On the Integration Flows page, review the linked Salesforce flows for Jamf discovery.
    
    If a flow doesn't load, retry or resolve the issue before you continue.

CIs are created or updated based on the field mappings and identification rules. When the target is enabled, discovery runs on the schedule that you set. Open the **Scan Jobs** page to monitor progress. Each Jamf target creates two scan jobs, one for computers and one for mobile devices. Each scan job shows a summary of resources by type and a detailed list of new and updated CIs.