Overview
This article describes how to deploy the Beyond Identity Authenticator application to macOS computers via Jamf. This article is not the only way to do it; this is a sample way to do it.
The process here uses a script to check once every day if the desired version is installed, and if not, it will call Jamf to execute the policy that will install the software.
Step 1: Download .pkg
Download the Beyond Identity Authenticator .pkg installer from the official source.
Save it to a location you can easily access later (for example, your Downloads folder).
Step 2: Upload .pkg to Jamf
Open All Settings menu
Select Computer Management
Open Packages
Click the + New button
Click the Choose File button
Select the downloaded file
Click the Save button
Wait until the package becomes available. You can check this by opening the uploaded package. Once the yellow banner is gone, the package is ready.
Step 3: Create Policy to Install the Package
Navigate to Computers
Select Policies
Click the + New button
Type “Install Beyond Identity Authenticator” as the Display Name
Check (or leave checked) the Enabled checkbox
Check the Custom checkbox
Type “install_bid” as the Custom Event
Select Ongoing for the Execution Frequency
Select the Packages tab
Click the Configure button
Click the Add button on your newly uploaded package
Select the Scope tab
Set All Computers as the Target Computers
Set All Users as the Target Users
Click the Save button
Step 4: Create a Script to Run the Installer
Open All Settings menu
Select Computer Management
Open Scripts
Click the + New button
Type “Check BI Authenticator Version and Install Minimum Required Version” as the Display Name
Use this sample script (line 18 is the minimum version check):
#!/bin/zsh
# un comment set -x for debug output
set -x
# Test if the app exists, if not run the installer and exit script
if [[ ! -e /Applications/Beyond\ Identity.app ]]
then echo "beyond identity does not exist, installing..."
/usr/local/bin/jamf policy -event install_bid
exit 0
fi
# Get Beyond Identity Authenticator current version via spotlight
get_bid_vers=$(mdls /Applications/Beyond\ Identity.app -name kMDItemVersion -raw)
test_touch=$(touch thisfile.txt)
# use is-at-least to validate we are running minimum desired version
autoload is-at-least
if is-at-least 2.46.0 "${get_bid_vers}"
then echo "required version detected, exiting..."
exit 0
else ${test_touch}
/usr/local/bin/jamf policy -event install_bid
fiClick the Save button
Step 5: Create Policy to Execute the Script
Navigate to Computers
Select Policies
Click the + New button
Type “Check BI Authenticator Version and Update to Minimum Version” as the Display Name
Check (or leave checked) the Enabled checkbox
Check the Recurring Check-in checkbox
Check the Custom checkbox
Type “check_and_upgrade_BI_authenticator_version” as the Custom Event
Select Once every day for the Execution Frequency
Select the Script tab
Click the Configure button
Click the Add button on your new script
Select the Scope tab
Set All Computers as the Target Computers
Set All Users as the Target Users
Click the Save button