Suggestions
Have a great idea that you’d like to see added to our service? Perhaps there’s an existing feature that you’d like to have extended or modified? Share it here!
453 results found
-
more granular webhooks
Would be amazing if we could configure webhooks more granularly:
Ie be able to configure the data that gets sent out
Currently a webhook will send
device.changed_group
device.enrolled
device.unenrolled
device.lock.enabled
abm.device.addedWould be nice if we could set it up so a web hook only fires on selected events
9 votes -
Assign custom attributes to groups or enrollments
Ability to set certain custom attributes for specific device groups and specific enrollment groups.
This would enable us to build attribute collections that may be used for different things depending on the enrollment type, or the device group.
2 votes -
Include Rancher in Munki managed apps
This request is to include Rancher in the munki shared apps
Rancher is an open-source application that provides all the essentials to work with containers and Kubernetes on the desktop
1 vote -
Include Notion Calendar in munki shared apps
"Notion" is currently included in the munki shared apps. This request is to also include the Calendar App - https://www.notion.so/product/calendar
1 vote -
Ability to have scripts run at device enrollment
Ability to run scripts at the device enrollment stag.
Example Use Case:
Set Computer hostname to company standards, and any other personalization scripts we run on the system itself.2 votes -
add baseline to munki shared apps
Add Baseline to the default munki shared apps
3 votes -
Group based on Enrollment Custom Attributes
Ability to assign devices to a group based on a custom attribute during enrollment.
We would love to be able to use a department attribute from our idp to be able to map devices to a group during enrollment, to help automate the process and keep it almost a 0 touch deployment for new devices.
1 vote -
Filter Profiles by Device Type, Assigned Groups
It would be amazing if we could get more granular filtering for the profiles section. It gets very messy very quick.
Maybe a way to filter profiles by group, or profiles by device type would be amazing.
1 vote -
Remove the device name pop-up in the new devices page UI
The device name pop-up in the new devices page UI is intrusive and makes it difficult to open the device in a new tab
1 vote -
Monitoring unpatched CVEs
Interesting post by Graham about using the Sofa feed info to track unpatched CVEs in their mac fleet with osquery.
Last checked: 2024-05-03T20:33:36+00:00Z
Machine readable feed: v1/macosdatafeed.jsonhttps://grahamgilbert.com/blog/2024/05/03/investigating-unpatched-cves-with-osquery-and-sofa/
1 vote -
Option to auto renew ACME Certificates - DDM and Profiles - Managed Device Attestation
We would like an option to have ACME certificates auto renew. This is a feature currently available for SCEP issued certificates.
Our use case is using managed device attestation and the new ACME payloads to create certificates that can be used for 802.1x, but we need them to auto renew before they expire (for internal reasons the validity period is 91 days).
It would also be helpful to provide tokenised values for the CN.
3 votes -
Add the ability for scripts/jobs to execute on boot / login.
It would be good if scripts/jobs could be configured to run each time the device boots or the user logs in.
This is handy to enforce script logic on the device without having to add a recurring script that executes every day.
5 votes -
Saving column sorting / pin column
If device columns can't be custom sorted and saved at this time, it would be nice if the "pin to the left" feature remained pinned - not sure if it times out or reverts after X amount of navigating to different groups, but it doesn't stay pinned too long.
1 vote -
API - Provide clear documentation about API timeout response object and headers
In the Sync Profiles API documentation here - https://api.simplemdm.com/#sync-profiles - there is a note indicating this specific endpoint is rate limited to 1 request per 30 seconds, and the header 'X-RateLimit-Reset' can be checked to see when the limit will be reset.
Can you please include specific examples in the documentation for this particular endpoint that demonstrate what the response headers will look like.
Additionally, for all API endpoints that have a rate limit, please indicate how the API will respond if the rate limit is hit and whether there will be a header 'X-RateLimit-Reset' value that indicates when that…
3 votes -
Integrate Google’s Santa project into SimpleMDM?
The clue is in the name SimpleMDM - your product makes the difficult parts of managing your Mac devices simple - setting up and managing Munki could be challenging, and now the easy to use implementation you’ve provided is a great fit for lots of organisations.
Can you apply the same magic to Google Santa please?
https://github.com/google/santa
Here’s the use case. In our organisation, end users run with administrator access. This empowers them to do all the things they need to do to be productive, and ensures IT isn't a bottleneck…
…but - with great power comes great responsibility. There’s…
3 votes -
Custom Configuration Profiles API - Download the profile as a JSON object, not a text object
Currently it looks like the download method for the custom configuration profiles API returns the profile being downloaded as a text object not a JSON object.
The preferred (at least for me) response object that should be returned is a JSON object in keeping with all other responses.
3 votes -
Apps & Media > Assignment UI redesign
The user interface for the Apps & Media > Assignment area of SimpleMDM is rather clunky for viewing and adding assignment groups, etc.
For example, after creating an assignment group to allocate profiles to, picking/selecting a profile is a pain as you have to know the name of a profile in order for it to appear in the list of app/media/profiles that can be added to the group. This is most painful when there are more than three profiles that can be selected (in my particular case there are over twenty profiles that can possibly be selected).
This part of…
3 votes -
New API endpoints request
Hello,
When writing terraform provider we discovered few topics we would like to ask to improve on the API side.
Custom Profiles:
Please add endpoint "Retrieve one" GET https://a.simplemdm.com/api/v1/custom_configuration_profiles/{profile_id} with json answerPlease add "enable declarative management" and "Auto renew SCEP issued certificates" as attributes for create/update custom profile
Please add "enable declarative management" to json answer.
Device Groups:
Please add create, update and delete endpoints.Thank you, David
4 votes -
Introduce source IP based allow listing
While complex username/password + TOTP requirement is a standard and solid security requirement for administrative access to the SimpleMDM controls, it could be made even stronger with the addition of IP allow listing. I would love to have +1 layer of opt-in friction between the internet at large and a tool has the ability to brick all of my organization's laptops simultaneously.
If implemented, I'd request that a minimum of 2, preferably 3 remote sources be required before the service could be enabled: this will provide small businesses with redundancy for the event that they change ISPs and cannot bring…1 vote -
Support for defined build numbers in DDM software update
It's fantastic that we can get started with DDM software updates... however, I think the protocol does allow for us to push a specific build number.
This is handy for testing - as I've got a device enrolled in the beta that I'd love to push specific build numbers too, to try out the functionality - without having to reach for DFU mode on a long suffering test system.
Going forward, it would be fantastic to nudge/enforce specific build numbers for beta testers, so we can ensure testers are all on latest betas where appropriate.
Thanks :)
2 votes
- Don't see your idea?