420 results found

1. Allow password rotations via API

   Now that firmware and recovery lock passwords may be rotated via the web interface, it would be great to have that functionality available via the API as well.

   7 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   completed  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

2. eSIM management aka RefreshCellularPlans command

   Apple introduced iPhones completely without SIM tray in US recently (rest of the world will follow soon), command for managing eSIM is available for some time.

   Implementing command RefreshCellularPlans will help us to streamline our SIM deployment to our users and get rid of plastic waste.

   Please implement RefreshCellularPlans and make available via API.

   https://support.apple.com/en-gb/guide/deployment/dep36c581d6x/web
   https://developer.apple.com/documentation/devicemanagement/update_the_esim_cellular_plan

   6 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   completed  ·  1 comment  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

3. "UpdateOS version" GUI commands available for Macs via the API

   Add the maOS UpdateOS GUI Update commands to the API. Currently only iOS Software Updates are supported in the API

   4 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close
   completed  ·  AdminEric McCann (Admin, SimpleMDM) responded

   This has been added: https://api.simplemdm.com/#update-os

4. Manage Non-Custom Profiles via API

   Currently the API has a customconfigurationprofiles endpoint (https://simplemdm.com/docs/api/#custom-configuration-profiles) which can be used to create, modify, and assign/unassign custom profiles. However, there is on way to manage other profile types via the API.

   Say I create a FileVault profile in the web app and then want to assign the profile only to specific Macs using the API. There's not a specific group or device I want to manually assign. Instead I only want to assign to specific endpoints programmatically using a config management tool like Chef or Ansible. Since the profile is not "custom" I am unable to.

   I am asking regular, non-custom profiles have these actions added to the API.

   • Assign to device
   • Unassign from device
   • Assign device group
   • Unassign from device group

   Just like is currently possible for custom profiles - https://simplemdm.com/docs/api/#assign-to-device I understand there's complexity with creating these profiles through the API and thus this request does not cover that scope. Thank you!

   Currently the API has a customconfigurationprofiles endpoint (https://simplemdm.com/docs/api/#custom-configuration-profiles) which can be used to create, modify, and assign/unassign custom profiles. However, there is on way to manage other profile types via the API.

   Say I create a FileVault profile in the web app and then want to assign the profile only to specific Macs using the API. There's not a specific group or device I want to manually assign. Instead I only want to assign to specific endpoints programmatically using a config management tool like Chef or Ansible. Since the profile is not "custom" I am unable… more

   8 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close
   completed  ·  AdminEric McCann (Admin, SimpleMDM) responded

   This has been added! Documentation is available here: https://api.simplemdm.com/#profiles

5. Profiles API - add upload/create custom profile method

   The profiles API endpoint doesn't have a method of uploading a custom configuration profile. This means it is not possible to create custom profiles and upload them to SimpleMDM, and then automatically create device group relationships and or assigning scopes to those custom profiles.

   An example where this would be useful is where profiles are managed within a git repo and pushed to SimpleMDM via automated workflows when these profiles are updated with new payloads.

   This upload/create method should also include settings for creating an assignment scope (for example, setting the OS type the profile can be applied to, the minimum and or maximum macOS version that the profile can be assigned to, and macOS architecture types the profile can be assigned to).

   This method should be able to take signed or unsigned profiles.

   The profiles API endpoint doesn't have a method of uploading a custom configuration profile. This means it is not possible to create custom profiles and upload them to SimpleMDM, and then automatically create device group relationships and or assigning scopes to those custom profiles.

   An example where this would be useful is where profiles are managed within a git repo and pushed to SimpleMDM via automated workflows when these profiles are updated with new payloads.

   This upload/create method should also include settings for creating an assignment scope (for example, setting the OS type the profile can be applied to, the… more

   0 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   completed  ·  2 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

6. Allow bulk import of GUID and passwords for DEP-created accounts

   Allow for the bulk import of information on DEP auto-created admin accounts. An API or UI that allows for the entry of serial number, GUID, and password for accounts created before the release of the Auto Admin feature. This would permit us to get rotation of the password without having to redeploy.

   12 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close
   completed  ·  AdminEric McCann (Admin, SimpleMDM) responded

   I'm marking this one as closed/completed because, since the initial release of this feature, we added the ability to reset admin passwords for an auto-admin account regardless of whether or not the password was already stored. I believe the current functionality achieves the original intent of this suggestion. If there is additional functionality you'd like to see added related to this, please submit a new suggestion.

7. Implement Apple Kerberos SSO Extension as a profile

   This is a great tool to sync AD password to the local one. It is somewhat easy to get this done as a custom plist profile. I used the settings from Kandji MDM as reference, a guide from JAMF on how to deploy the Kerberos Extension and Imazing.com profile manager to create the plist file. Imported the custom profile in SimpleMDM, applied to Pilot group and it worked just like intended. This was easy, but it should be made standard.

   A sample plist file is available from https://github.com/ProfileCreator/ProfileManifests/issues/556

   4 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   1 comment  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close
   completed  ·  AdminEric McCann (Admin, SimpleMDM) responded

   This profile has been added under Configs > Profiles.

8. Add the ability to change timezone on tvOS and iOS. Not set to automatic, but force an actual timezone.
   3 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   completed  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

9. Add Mactracker to Shared App library.

   I'd like to have Mactracker added to the Shared App library. The non MAS version is preferred so I can add it to Munki as an optional install. Thanks!

   https://mactracker.ca/

   2 votes

   Vote Vote Vote

   Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   1 vote 2 votes 3 votes Remove votes

   You have left! (?) (thinking…)
   completed  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

10. Munki Integration : On-Demand installation

    I wish that the Munki "OnDemand" key that is planned for a PkgInfo is exposed in the declaration of a package in SimpleMDM. That would offer to trigger the installation of a package as needed without an instal / remove cycle.

    2 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

11. Add JetBrains Toolbox to Shared App Catalog

    Since other JetBrains IDEs are in the Shared App Catalog, please add the JetBrains Toolbox, which is the JetBrains equivalent to the Adobe Creative Cloud installer.

    https://www.jetbrains.com/toolbox-app/

    1 vote

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

12. Expose assignment count for custom profiles via API

    The internal API for profile search https://a.simplemdm.com/admin/profiles.json returns the number of groups and devices assigned to a profile as groupCount and deviceCount.

    Exposing this information to the customconfigurationprofiles "list all" endpoint would make it possible to add a scheduled job to cleanup profiles with 0 installs, so the UI doesn't get clogged up with outdated profiles.

    4 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

13. Enable Remote Desktop per enrollment instead of globally

    The new feature to enable remote desktop automatically is great, but we only want to enable it on a certain enrollment, not on all machines.

    5 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

14. Add the ability to mark some custom attributes as "secret"

    We're looking at pushing things like wifi passwords to devices using profiles and custom attributes... as we aim to use MIST's multiple PSK option - https://www.mist.com/documentation/multi-psk/

    Each device will have their own wifi password pushed as a custom attribute - but these are effectively passwords. It would be awesome if they could be tagged as secret (like a lot of CI/CD tools allow you to do) and we could log that an admin had viewed them (in the same way unlock PIN and Activation Lock Key access is logged now

    2 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close
    completed  ·  AdminEric McCann (Admin, SimpleMDM) responded

    When editing a custom attribute via Configs > Attributes, you can now select "Mark as secret". When checked, this will prevent users with "Custom attributes marked as secret" permissions disabled for their user role from seeing the values stored for these attributes.

15. Add ClickUp as a shared app.

    Would like to have ClickUp added the shared app library. Thanks!

    1 vote

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

16. Implement "SetAutoAdminPassword" to allow DEP created admin account password rotation

    SetAutoAdminPassword allows changing the password of a local admin account that was created by Setup
    Assistant during DEP enrollment via the AccountConfiguration command. It is available in macOS v10.11 and
    later. This would be useful to allow admin password rotation. Ideally this would also available via the API.

    11 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close
    completed  ·  Anonymous responded

    This is now supported (with some limitations). Documentation is available here: https://help.pdq.com/hc/en-us/articles/5626064805659-macOS-Account-Setup-and-Admin-Passwords

17. Add OpenVPN Connect app to shared catalog

    https://openvpn.net/client-connect-vpn-for-mac-os/

    v3. Thanks!

    3 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close
    completed  ·  AdminEric McCann (Admin, SimpleMDM) responded

    Added a while back but did not update post at the time.

18. Add Slack universal installer to Shared Apps

    I found that Slack has a universal installer available on their website, but only the Intel version is in the Shared Apps library. It would be nice to be able to push the universal version from Shared Apps instead/in addition.

    (link here, under the "Distribute Slack" section: https://slack.com/help/articles/360035635174-Deploy-Slack-for-macOS)

    Thank you!

    7 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    completed  ·  1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

19. Add schedule to script jobs

    Scripts and jobs to run them are a fantastic addition but the jobs are single use at that this stage.

    The ability to schedule jobs seems like the next logical iteration.

    Keep up the good work SimpleMDM

    27 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close
    completed  ·  AdminEric McCann (Admin, SimpleMDM) responded

    Script Jobs can now be scheduled within the admin interface.

20. Add Scripts and Script Jobs to API

    Feature Request: Add Scripts and Script Jobs to API

    Currently the "Scripts" and "Script Jobs" functionality is only supported when using the SimpleMDM web console via a browser.

    • Scripts: https://a.simplemdm.com/admin/scripts
    • Script Jobs: https://a.simplemdm.com/admin/script_jobs

    With the goal to support custom advanced automation for our machine provisioning processes and integration with other configuration management systems, we need the ability to:

    Requirements:

    • Create/Update (Upload) and Delete Scripts
      • Support multipart/form-data by default (similar to other SimpleMDM APIs)
    • List and Get Scripts, including:
      • Script ID
      • Script name
      • Full script contents
      • Created/Updated timestamps
    • Create Script Jobs
    • List Script Jobs
    • Get Job Status
    • Get Job Log / Results / Output

    Desirable bells & whistles premium options:

    • Query / Filter Script Jobs via Script Jobs List API. Available Filters might include:
      • Script Name
      • Script ID
      • Target ID(s) (Device ID(s), Device Group ID(s), Assignment Group ID(s))
      • Target Type(s) (Devices, Device Groups, Assignment Groups)
      • Created Timestamp
      • Updated/Modified Timestamp
      • Script Status (Pending, Completed, Failed)
    • Support Base64 encoding for Script Content when Creating/Updating scripts
    • API endpoint to get "raw" (application/octet-stream? Base64 encoded text/plain?) output of the script stdout/stderr Something like: GET https://a.simplemdm.com/api/v1/job/response/{job_id}
      • Currently the web console embeds the Script output as a JSON-escaped field in the "Metadata.job_response" field

    Why we need this functionality:

    We use SimpleMDM in addition to SaltProject for fleet management. Most of our fleet configuration is driven by Salt, however having the ability to use the native macOS MDM for management and automation will greatly benefit our ability to serve our users. The combination of Scripts (with Attribute Support!) and Jobs could be a game changer --if-- we could programatically interact with it. Some scenarios where this is valuable:

    • Initial Device Provisioning: When a new Device is enrolled in SimpleMDM, we want to take additional actions via the "device_enrolled" webhook event with a Script Job to do just-in-time provisioning.
    • Device Status Change Events: We already pull all SimpleMDM logs via API. We want to take advantage of

    Example scenarios:

    1. Upload A Bash Shell Script

    Request (POST)
    curl https://a.simplemdm.com/api/v1/scripts/ \
    -F "[email protected];filename=myscript.sh" \
    -F attributesupport=true \
    -u {APIKEY}:

    2.1. Execute myscript.sh against a single device

    Request (POST):
    curl https://a.simplemdm.com/api/v1/jobs/ \
    -d scriptname=myscript.sh \
    -d target={deviceid} \
    -d target_type=device

    Response:
    HTTP/1.1 200
    {
    "data": {
    "type": "job",
    "id": "abcde123456",
    "attributes": {
    "scriptname": "myscript.sh",
    "created": "2022-03-03T01:23:45Z",
    "createdby": "[email protected]",
    "target_type": "device",
    "target": "device-id-xxxx1234",
    "status": {
    "pending": 1,
    "completed": 0,
    "failed": 0
    },
    "devices": [
    {
    "id": "device-id-xxxx1234",
    "status": "pending"
    }
    ]
    }
    }
    }

    2.2. Execute myscript.sh against a device group

    Request (POST)
    curl https://a.simplemdm.com/api/v1/jobs/ \
    -d scriptname=myscript.sh \
    -d target={devicegroupid} \
    -d targettype=device_group

    1. Get Job Status:

    Request:
    curl https://a.simplemdm.com/api/v1/job/{JOB_ID} \
    -u {API_KEY}

    Response:
    HTTP/1.1 200
    {
    "data": {
    "type": "job",
    "id": "abcde123456",
    "attributes": {
    "scriptname": "myscript.sh",
    "created": "2022-03-03T01:23:45Z",
    "createdby": "[email protected]",
    "targettype": "device",
    "target": "device-id-xxxx1234",
    "status: {
    "pending": 0,
    "completed": 1,
    "failed": 0
    },
    "devices": [
    {
    "id": "device-id-xxxx1234",
    "status": "completed",
    "logid": "wxyz0987"
    }
    ]
    }
    }
    }

    1. Get Job Output

    Request:

    curl https://a.simplemdm.com/api/v1/job/log/{LOG_ID} \
    -u {API_KEY}

    Response:

    {
    "data": {
    "type": "log",
    "id": "ec481e3a74a44f588f95bab03f9b76e5",
    // ... standard job attributes?
    "metadata": {
    "name": "myscript.sh",
    "job_status": "0",
    "stdout": "<<Base64 Encoded stdout>>",
    "stderr": "<<Base64 Encoded stderr>>"
    }
    }
    }

    Feature Request: Add Scripts and Script Jobs to API

    Currently the "Scripts" and "Script Jobs" functionality is only supported when using the SimpleMDM web console via a browser.

    • Scripts: https://a.simplemdm.com/admin/scripts
    • Script Jobs: https://a.simplemdm.com/admin/script_jobs

    With the goal to support custom advanced automation for our machine provisioning processes and integration with other configuration management systems, we need the ability to:

    Requirements:

    • Create/Update (Upload) and Delete Scripts
      • Support multipart/form-data by default (similar to other SimpleMDM APIs)
    • List and Get Scripts, including:
      • Script ID
      • Script name
      • Full script contents
      • Created/Updated timestamps
    • Create Script Jobs
    • List Script Jobs
    • Get Job Status
    • Get Job Log /… more
    8 votes

    Vote Vote Vote

    Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    1 vote 2 votes 3 votes Remove votes

    You have left! (?) (thinking…)
    0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close
    completed  ·  Anonymous responded

    This has been implemented. Please see our documentation for more information:

    • Scripts API: https://simplemdm.com/docs/api/#scripts
    • Script Jobs API: https://simplemdm.com/docs/api/#script-jobs

    
    

    If there are additions/changes you would like to see, please submit a new suggestion. Also, thank you for the very detailed description!