> ## Documentation Index
> Fetch the complete documentation index at: https://docs.serval.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Jamf Security Cloud

> Connect Jamf Security Cloud to Serval to query device risk states, manage manual risk overrides, and remove devices - across iOS, iPadOS, Android, macOS, and Windows endpoints.

## About Jamf Security Cloud

Jamf Security Cloud (the former Wandera RADAR platform) provides mobile threat defense and endpoint risk assessment for iOS, iPadOS, Android, macOS, and Windows devices. Connecting it to Serval lets your team query each enrolled device's current risk state, look devices up by UEM external ID or device GUID, set or clear manual risk-level overrides, and delete devices - all through Serval workflows that call the Jamf Security Cloud Risk and Device Lifecycle APIs on your behalf. Serval only ever sends authenticated requests to `api.wandera.com`.

**Authentication:** RADAR application credentials. You create an API application in the Jamf Security Cloud portal and give Serval the Application ID and Application Secret. Serval stores the ID and an encrypted copy of the secret, and exchanges them for short-lived (15-minute) tokens on demand - no browser-based sign-in and no user-level consent. When you connect, Serval validates the credentials and automatically discovers your RADAR customer ID from the login token, so workflows never ask for it.

**Data sync:** On demand. There is no background sync - workflows call the Jamf Security Cloud APIs when they run (subject to each workflow's approval procedure).

## What the Jamf Security Cloud integration enables

| Capability                          | Description                                                                                                                                                                                         |
| ----------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Risk monitoring                     | List the risk states of all enrolled devices (risk level, activity status, UEM enrollment state, device details), or look up a single device by its UEM external ID or Jamf Security Cloud GUID.    |
| Risk management                     | Manually override a device's calculated risk level (HIGH, MEDIUM, LOW, or SECURE), or reset an override so the device returns to the risk level calculated by Jamf Security. Both require approval. |
| Device lifecycle                    | Asynchronously delete devices from Jamf Security Cloud by external ID and/or GUID (up to 500 per request). Requires approval.                                                                       |
| Full API access in custom workflows | Custom Serval workflows can call the Risk API (v1 and v2) and Device Lifecycle API endpoints with typed request/response schemas, using the credentials you configured.                             |

Rate limits are enforced by Jamf: 5 requests per second and 10,000 per day per application integration, counted separately for logins and data requests.

## Get your credentials

Serval authenticates with a RADAR **API application**: an Application ID and Application Secret pair created in the Jamf Security Cloud portal.

<Steps>
  <Step title="Open Security Integrations">
    Log in to the Jamf Security Cloud (RADAR) portal and go to **Settings**, then **Security Integrations**.
  </Step>

  <Step title="Create an API application">
    Create a new application key for Serval (e.g. named "Serval Integration").
  </Step>

  <Step title="Copy the credentials">
    Copy the **Application ID** and **Application Secret** immediately - the secret is shown only once. You'll paste both into Serval.
  </Step>
</Steps>

## Connect Jamf Security Cloud to Serval

<Steps>
  <Step title="Open integrations">
    In Serval, go to **Settings** → **Integrations** and select **Jamf Security Cloud**.
  </Step>

  <Step title="Enter your credentials">
    Paste the **Application ID** and **Application Secret** from the RADAR portal.
  </Step>

  <Step title="Connect">
    Click connect. Serval validates the credentials against Jamf Security Cloud immediately - a failed connect means the credentials were rejected, and the error will say so. On success, Serval discovers and stores your RADAR customer ID automatically.
  </Step>
</Steps>