Source: https://sprinto-test.docs-staging.pageloop.ai/monitors/extended-checks-in-mdm-tool-comms/jamf-extended-checks-for-screen-lock

# JAMF – Extended Checks for Screen Lock

Sprinto’s enhanced integration with **JAMF** now supports automated monitoring of the **Screen Lock** compliance requirement in addition to existing checks such as **OS version**, **Antivirus**, and **Disk Encryption**.

This enhancement helps compliance teams continuously track screen lock enforcement across JAMF-managed macOS devices, reducing manual verification and audit overhead.

---

### Supported Checks

| Compliance Requirement | Description                                                 | Supported  |
| ---------------------- | ----------------------------------------------------------- | ---------- |
| OS Version             | Verifies that the operating system is up to date            | ✔️         |
| Disk Encryption        | Confirms that FileVault encryption is enabled               | ✔️         |
| Antivirus              | Detects the presence of supported antivirus software        | ✔️         |
| Screen Lock            | Ensures a screen saver and password protection are enforced | ✔️ _(New)_ |

---

### How It Works

Sprinto connects to the JAMF API to read configuration profiles applied to devices.

The **Screen Lock** monitor passes when:

- A configuration profile named _Screen Saver_ (or equivalent) is applied to the device.
- The **Start screen saver after** setting is **15 minutes or less**.
- The **Require Passcode to Unlock Screen** option is enabled.

If any of these configurations are missing or exceed the time threshold, the monitor will show as failing in Sprinto.

---

### Prerequisites

Before enabling this check, ensure that:

- You have admin access to your **JAMF Pro** account.
- You can create or edit **Configuration Profiles** for macOS devices.
- Devices are correctly scoped under the configuration profiles.

---

### Configure Screen Lock in JAMF

Follow these steps to enable and enforce the screen lock requirement via JAMF:

#### 1. Access Configuration Profiles

1. Log in to your **JAMF Pro** account.
2. Navigate to **Computers** → **Configuration Profiles**.
3. Select **Create a New Profile**, or edit an existing one.

#### 2. Configure Login Window Settings

1. In the profile editor, open the **Login Window** section.
2. Under **Options**, enable **Start screen saver after**.
3. Set the idle timeout to **15 minutes or less**.

> [!INFO]
>
> Sprinto accepts a maximum timeout of 15 minutes.

#### 3. Configure Security and Privacy Settings

1. Within the same profile, go to **Security & Privacy**.
2. Enable **Require Passcode to Unlock Screen** to enforce password protection after sleep or screen saver activation.

#### 4. Save and Deploy the Profile

1. Save the configuration profile.
2. Assign or **scope the profile to the relevant device groups** to ensure enforcement.

> [!INFO]
>
> The screen lock policy will not take effect unless assigned to at least one device group.

---

### Troubleshooting

| Issue                       | Possible Cause                           | Resolution                                                            |
| --------------------------- | ---------------------------------------- | --------------------------------------------------------------------- |
| Screen Lock monitor failing | Profile not assigned to any device group | Assign the profile to the relevant devices                            |
| Screen Lock monitor failing | Timeout set above 15 minutes             | Reduce to **15 minutes or less**                                      |
| Screen Lock monitor failing | Passcode requirement not enabled         | Enable **Require Passcode to Unlock Screen** under Security & Privacy |
| Screen Lock monitor missing | JAMF API access not configured           | Verify API credentials and permissions in the integration             |

---

### Next Steps

Once configured:

- The **Screen Lock** monitor will appear under the **Staff Devices** section in Sprinto.
- Any non-compliant devices will be flagged automatically.
- Sprinto will generate remediation tasks to help teams achieve compliance.

---

### Related Articles

- [Integrating JAMF with Sprinto](/integrations/overview/jamf-integration)
- [Staff Devices – Extended MDM Checks Overview](/monitors/extended-checks-in-mdm-tool-comms)
- [Managing Compliance Policies in Sprinto](/policies/dashboard-actions/manage-policies-and-versions)