MSP AI DEV BLOG

The Codex

Apple MDM, JAMF Pro, and Mac automation guides, how-tos, and technical articles from MacJediWizard Consulting.

Platform SSO Simplified Setup with Okta: Fixing the associatedDomains=(null) Registration Failure

Platform SSO Simplified Setup with Okta: Fixing the associatedDomains=(null) Registration Failure

Platform SSO Simplified Setup in macOS 26 moves IdP registration into Setup Assistant. Users authenticate with Okta before reaching the desktop. The Mac creates the first local account from IdP credentials. No banner notifications, no user action after the initial sign-in. If you have read my previous article on Platform

Software Updates in JAMF Pro Blueprints: A Technical Deep Dive

Software Updates in JAMF Pro Blueprints: A Technical Deep Dive

Software update management changed fundamentally when Apple introduced Declarative Device Management. Instead of MDM servers pushing commands and hoping devices comply, DDM declares a desired state and devices autonomously maintain it. JAMF Pro Blueprints implements this through what they call "set it and forget it" enforcement, where administrators

Understanding JAMF Pro Blueprints: When and How to Use DDM-Powered Device Management

Understanding JAMF Pro Blueprints: When and How to Use DDM-Powered Device Management

JAMF Pro Blueprints deploys device configurations using Apple's Declarative Device Management (DDM) protocol instead of traditional MDM commands. The device receives a declaration of its desired state and maintains that state autonomously, reporting changes back to JAMF Pro without polling. This article covers what Blueprints are, how they

Declarative Device Management vs Traditional MDM: What Changes and What You Do About It

Declarative Device Management vs Traditional MDM: What Changes and What You Do About It

Apple announced at WWDC 2025: traditional MDM software update commands are deprecated. They will be removed in 2026. If you manage Macs or iOS devices through JAMF Pro, Intune, Mosyle, or any MDM solution, this affects your workflows. This is not a minor API change. It represents a fundamental shift

Managing Apple Intelligence in the Enterprise: What You Can Control and What You Cannot

Apple Intelligence

Managing Apple Intelligence in the Enterprise: What You Can Control and What You Cannot

Apple Intelligence shipped with iOS 18.1, iPadOS 18.1, and macOS 15.1 Sequoia in late 2024. The feature set has expanded with each OS release since. Organizations managing Apple devices face a decision: allow it, restrict it partially, or attempt to block it entirely. This article covers the

macOS Platform SSO: The Promise, the Pain Points, and What Actually Works

macOS Platform SSO: The Promise, the Pain Points, and What Actually Works

Platform SSO is Apple's answer to a long-standing enterprise problem: making Macs behave like Windows devices in identity-managed environments. Users authenticate once with corporate credentials. That authentication flows through to apps, websites, and system prompts. The Mac becomes a first-class citizen in your identity infrastructure. The promise is

How to Use JAMF Connect with Authentik: Building an ROPG Proxy for Password Synchronization

How to Use JAMF Connect with Authentik: Building an ROPG Proxy for Password Synchronization

synchronization between macOS local accounts and cloud identity providers. Authentik does not natively support ROPG for regular user authentication, despite listing "password" in its discovery document's supported grant types. This article provides a working solution using Authentik's Flow Executor API. The problem: JAMF Connect

How to Stop AI from Writing Like AI

How to Stop AI from Writing Like AI

AI writes faster than you. This creates a problem. Without constraints, AI produces generic content. Hedged language. Bullet points for everything. Filler phrases preceding statements nobody needed. Content applicable to any company, any situation, anyone. You recognize it immediately. LinkedIn posts with identical cadence. Documentation explaining what something is but