JumpCloud Apple MDM, Applications, Authentication, and Bridge Tables

Tables

JumpCloudAppleMDMDevices

NameTypeDescription
ConfigIDintegerA unique identifier for the device configuration within JumpCloud.
IDstringThe unique identifier for the Apple MDM device in JumpCloud.
CreatedAtstringTimestamp of when the device record was created.
DepRegisteredbitIndicates if the device is registered with Apple’s Device Enrollment Program (DEP).
EnrolledbitIndicates whether the device is enrolled in Mobile Device Management (MDM).
HasActivationLockBypassCodesbitShows whether activation lock bypass codes are available for the device.
MdmOsFamilystringThe operating system family managed by MDM (e.g., iOS, macOS).
ModelFamilystringBroad model family classification of the device.
OsVersionstringThe version of the device’s operating system.
SerialNumberstringThe hardware serial number of the device.
UdidstringUnique Device Identifier (UDID) assigned by Apple.
DeviceInformationActivationLockAllowedWhileSupervisedbitIndicates whether Activation Lock is allowed while the device is supervised.
DeviceInformationAvailableDeviceCapacityfloatAmount of available storage capacity on the device.
DeviceInformationDeviceCapacityfloatTotal storage capacity of the device.
DeviceInformationDeviceNamestringThe user-assigned or system-assigned name of the device.
DeviceInformationIccidstringIntegrated Circuit Card Identifier for the SIM card in the device.
DeviceInformationImeistringInternational Mobile Equipment Identity number for the device.
DeviceInformationIsSupervisedbitIndicates whether the device is supervised (enrolled in supervised mode).
DeviceInformationModelMarketingNamestringMarketing name of the device model (e.g., MacBook Pro).
DeviceInformationModelNamestringThe technical name of the device model.
DeviceInformationModelNumberstringThe specific model number identifier for the device.
DeviceInformationOsBuildVersionstringThe build version of the installed operating system.
DeviceInformationOsExtraVersionstringAdditional version string information for the OS.
DeviceInformationOsMarketingNamestringThe marketing name for the OS (e.g., macOS Sonoma).
DeviceInformationOsSupplementalBuildVersionstringSupplemental build identifier for the OS.
DeviceInformationSecondIccidstringICCID for a second SIM if supported.
DeviceInformationSecondImeistringIMEI for a second SIM if supported.
DeviceInformationSecondSubscriberCarrierNetworkstringCarrier network associated with the second SIM.
DeviceInformationSofwareUpdateIdstringIdentifier for the most recent software update available.
DeviceInformationSubscriberCarrierNetworkstringCarrier network associated with the primary SIM.
DeviceInformationWifiMacstringThe MAC address of the Wi-Fi interface.
SecurityInfoEnrolledViaDepbitIndicates if the device was enrolled via Apple DEP.
SecurityInfoFilevaultEnabledbitShows whether FileVault disk encryption is enabled (macOS only).
SecurityInfoIsActivationLockManageablebitIndicates whether Activation Lock can be managed through MDM.
SecurityInfoIsUserEnrollmentbitIndicates if the device is enrolled using Apple’s User Enrollment method.
SecurityInfoPasscodeCompliantbitShows if the device passcode complies with security policies.
SecurityInfoPasscodePresentbitIndicates whether the device currently has a passcode set.
SecurityInfoUserApprovedEnrollmentbitIndicates if enrollment was explicitly approved by the end user.
JumpCloudAppleMDMIDstringUnique identifier for the Apple MDM configuration in JumpCloud.
BatchDatedatetimeTimestamp indicating when this device record was last batched or synchronized into reporting.

JumpCloudAppleMDMs

NameTypeDescription
ConfigIDintegerUnique identifier for the JumpCloud Apple MDM configuration.
IDstringThe specific MDM configuration record ID within JumpCloud.
AllowMobileUserEnrollmentbitIndicates whether mobile devices can self-enroll in MDM.
ApnsCertExpirystringExpiration date of the Apple Push Notification Service (APNs) certificate.
ApnsPushTopicstringThe APNs topic string used to push MDM commands to devices.
AppleCertCreatorAppleIDstringThe Apple ID used to create the APNs certificate.
AppleCertSerialNumberstringSerial number of the APNs certificate.
DefaultIosUserEnrollmentDeviceGroupIDstringDefault JumpCloud device group assigned to newly enrolled iOS devices.
DefaultSystemGroupIDstringDefault JumpCloud system group assigned to enrolled macOS systems.
DepAccessTokenExpirystringExpiration timestamp for the Apple DEP (Device Enrollment Program) access token.
DepServerTokenStatestringCurrent state of the Apple DEP server token (e.g., valid, expired).
NamestringThe administrator-assigned name of the Apple MDM configuration.
OrganizationstringOrganization name associated with the MDM configuration.
DepEnableZeroTouchEnrollmentbitIndicates if zero-touch enrollment is enabled for Apple DEP devices.
DepSetupAssistantOptionsJsonstringJSON definition of setup assistant options for DEP-enrolled devices.
DepWelcomeScreenTitlestringCustom title text displayed on the DEP enrollment welcome screen.
DepWelcomeScreenParagraphstringCustom paragraph text displayed on the DEP enrollment welcome screen.
DepWelcomeScreenButtonstringCustom button text displayed on the DEP enrollment welcome screen.
AdesIosDefaultDeviceGroupObjectIDsJsonstringJSON array of default JumpCloud device groups assigned to ADEs-enrolled iOS devices.
AdesIosEnableZeroTouchEnrollmentbitIndicates if ADEs zero-touch enrollment is enabled for iOS devices.
AdesIosSetupAssistantOptionsJsonstringJSON definition of setup assistant options for ADEs-enrolled iOS devices.
AdesIosSetupOptionsJsonstringJSON definition of setup workflow options for iOS ADEs enrollment.
AdesIosWelcomeScreenTitlestringCustom title for the ADEs enrollment welcome screen (iOS).
AdesIosWelcomeScreenParagraphstringCustom paragraph text for the ADEs enrollment welcome screen (iOS).
AdesIosWelcomeScreenButtonstringCustom button text for the ADEs enrollment welcome screen (iOS).
AdesMacosDefaultDeviceGroupObjectIDsJsonstringJSON array of default JumpCloud device groups assigned to ADEs-enrolled macOS devices.
AdesMacosEnableZeroTouchEnrollmentbitIndicates if ADEs zero-touch enrollment is enabled for macOS devices.
AdesMacosSetupAssistantOptionsJsonstringJSON definition of setup assistant options for ADEs-enrolled macOS devices.
AdesMacosSetupOptionsJsonstringJSON definition of setup workflow options for macOS ADEs enrollment.
AdesMacosWelcomeScreenTitlestringCustom title for the ADEs enrollment welcome screen (macOS).
AdesMacosWelcomeScreenParagraphstringCustom paragraph text for the ADEs enrollment welcome screen (macOS).
AdesMacosWelcomeScreenButtonstringCustom button text for the ADEs enrollment welcome screen (macOS).
BatchDatedatetimeTimestamp when this MDM configuration record was last batched or synchronized into reporting.

JumpCloudApplications

NameTypeDescription
ConfigIDintegerUnique identifier linking the application record to its configuration in JumpCloud.
IDstringUnique identifier for the application within JumpCloud.
DisplayNamestringThe name shown in the JumpCloud console for the application.
SsoTypestringIndicates the type of SSO integration (e.g., SAML, OIDC).
ProvisionTypestringSpecifies the provisioning method (e.g., SCIM, manual).
StatusstringCurrent operational status of the application (e.g., active, disabled).
SsoUrlstringURL endpoint used for initiating Single Sign-On.
ColorstringHex or named color assigned for UI display of the application.
ProvisionExportdisabledbitBoolean flag indicating if user/group exports to the app are disabled.
ProvisionGroupsEnabledbitBoolean flag showing whether group provisioning is enabled.
ProvisionGroupsSupportedbitIndicates if the application supports provisioning groups.
ProvisionImportdisabledbitBoolean flag showing if imports from the app are disabled.
SsoactivebitBoolean flag showing if the SSO configuration is currently active.
SsoBetabitIndicates if the SSO feature for this application is in beta.
SsoCertexpiredbitBoolean flag showing whether the SSO certificate has expired.
SsoHiddenbitIndicates if the SSO integration is hidden in the JumpCloud console.
SsoIdpCertExpirationAtdatetimeTimestamp when the identity provider certificate expires.
SsoJitEnabledbitBoolean flag showing if Just-In-Time (JIT) user provisioning is enabled.
SsoJitSupportedbitIndicates if the application supports JIT provisioning.
ProvisionBetabitMarks if provisioning features are in beta for this application.
SsoSpErrorFlowbitConfiguration value defining error handling flow for Service Provider SSO failures.
ProvisionIDstringIdentifier for the application’s provisioning configuration.
DisplayLabelstringAlternate label displayed for the application in JumpCloud.
DescriptionstringHuman-readable description of the application.
OrganizationstringThe organization to which this application belongs.
NamestringThe internal or catalog name of the application.
CatalogItemJsonstringJSON object with catalog item details (e.g., template data, metadata).
BatchDatedatetimeThe date when this application record was last synchronized or batched.
LogoUrlstringURL to the logo image used for representing the application.

JumpCloudAuthenticationPolicies

NameTypeDescription
ConfigIDintegerUnique identifier linking the authentication policy to its configuration in JumpCloud.
IDstringUnique identifier for the authentication policy.
NamestringHuman-readable name assigned to the authentication policy.
DescriptionstringText description explaining the purpose or scope of the policy.
disabledbitBoolean flag indicating if the policy is currently disabled.
TypestringSpecifies the type of authentication policy (e.g., conditional access, MFA).
EffectActionstringDefines the enforcement action when conditions are met (e.g., allow, deny, require MFA).
TargetsUsersInclusionsJsonstringJSON list of specific users included in this policy’s scope.
TargetsUserGroupsInclusionsJsonstringJSON list of user groups explicitly included under this policy.
TargetsUserGroupsExclusionsJsonstringJSON list of user groups excluded from this policy’s enforcement.
ConditionsNotIpAddressInJsonstringJSON object defining disallowed IP ranges or addresses for authentication attempts.
BatchDatedatetimeThe date when this authentication policy record was last synchronized or batched.

JumpCloudAuthenticationPolicyTargetResources

NameTypeDescription
ConfigIDintegerUnique identifier linking the resource entry to its configuration in JumpCloud.
IDstringUnique identifier for the target resource record.
TypestringSpecifies the type of resource targeted (e.g., application, system, or service).
JumpCloudAuthenticationPolicyIDstringIdentifier of the authentication policy that this resource is associated with.
BatchDatedatetimeThe date when this target resource record was last synchronized or batched.

Bridge Tables

JumpCloudApplications_JumpCloudUsers

NameTypeDescription
JumpCloudUserModelIDstringUnique identifier of the JumpCloud user in the bridge table.
JumpCloudUserModelConfigIDintegerConfiguration identifier for the associated user.
JumpCloudApplicationModelIDstringUnique identifier of the JumpCloud application in the bridge table.
JumpCloudApplicationModelConfigIDintegerConfiguration identifier for the associated application.

Did this page help you?