Jamf Connect vs. Omnissa Identity Services

Jamf Connect works particularly well in our lab environments where the central "source of truth" for student accounts is our Okta IdP. As Apple has recommended moving away from Active Directory binding (which was our previous source of truth for authentication) we needed a new central way to manage this function. Okta worked well for other services on campus, and it was a smooth integration to make it work with Jamf Connect for virtually all use cases on campus (we still have a couple of NAS/SAN systems that require Active Directory).

Incentivized

Workspace ONE Access is a good fit for a variety of corporate scenarios, such as the need for businesses to provide secure access to their data and applications, the need to lower the costs associated with managing multiple user identities, and the need to boost employee productivity by streamlining access to corporate resources. It is less appropriate if you are not using all of its function and just use it for a particular function undermining its capabilities for example in our organization the use case is primarily restricted to giving staff members safe access to company information and applications which debunks its other features such as compliance and product support that it provides.

Incentivized

• password sync works very well
• regular updates to Jamf Connect with improvements
• small and simple tool
• Account creation is now on next level after we don't need AD Bind

• It provides an "SSO" type experience for access to applications and data. Users sign in to one "portal" and then have access to whatever university systems they need to do their job.
• It greatly simplifies securing these types of access. Firewall rulesets can be made much simpler and easier to manage, as well.

Incentivized

• More control over local access for non-cloud accounts
• Does not handle password changes made directly in Okta very smoothly
• Setting up configuration is a bit opaque to non-IdP personnel

Incentivized

• Support for more Single Sign-On (SSO) protocols.
• More comprehensive dashboards and reporting.
• Greater integration with other VMware products.

Incentivized

It is almost a certainty that we will continue to use Jamf Connect, even with Apple coming out with Platform Single Sign On. Jamf Connect provides several features that PSSO does not, such as "just in time" local account creation and automatic synchronization of enterprise credentials. It is unlikely that we would investigate other options at this time or in the near future.

Incentivized

Jamf Connect is quite easy to use and has the necessary options on the login screen (such as WiFi network connection) for getting connected and authenticated. It has a simple to use menulet that allows password changes and resets as well as temporary elevation, all with very clear workflows. It also allows us to assign field staff to their client users' computers so that they can provide support without having to resort to LAPS accounts.

Incentivized

The only other product we evaluated was Xcreds from TwoCanoes software, which is essentially a one person shop. We already were Jamf Pro customers, and Jamf Connect fulfilled all of the requirements for this function along with providing professional customer support. Since we already had a relationship with Jamf, it made perfect sense to add this product to our toolkit, and keep technical support contained within one organization.

Incentivized

We also examined several other options, particularly Lenovo Unified Workspace. The Lenovo product had some advantages over the VMWare product, particularly in the areas of customization of the look / feel and user experience. However, we have been a longtime VMWare customer, and we have VMWare VDI and other product implementations in place now that paired very well with the VMWare product.

Incentivized

• we need more time to understand how Jamf Connect and the configuration "really" works

• Better control over organization data and its applications.
• The software has frequently allowed us to save money on application security and mobile device management.
• It offers a lot of features that may be adjusted to meet the requirements of our particular business demands, which has increased efficiency and security for our organization.

Incentivized