Script to download macOS configuration profiles from a Jamf Pro server

Jamf_Pro_Mac_Configuration_Profile_Download.sh

#!/bin/bash

# This script is designed to use the Jamf Pro API to identify the individual IDs of 
# the macOS configuration profiles stored on a Jamf Pro server then download, decode
# and properly format the profiles as .mobileconfig files.

# If setting up a specific user account with limited rights, here are the required API privileges
# for the account on the Jamf Pro server:
#
# Jamf Pro Server Objects:
#
# macOS Configuration Profiles: Read 

# If you choose to specify a directory to save the downloaded profiles into,
# please enter the complete directory path into the ProfileDownloadDirectory
# variable below.

ProfileDownloadDirectory=""

# If the ProfileDownloadDirectory isn't specified above, a directory will be
# created and the complete directory path displayed by the script.

if [[ -z "$ProfileDownloadDirectory" ]]; then
   ProfileDownloadDirectory=$(mktemp -d)
   echo "A location to store downloaded profiles has not been specified."
   echo "Downloaded profiles will be stored in $ProfileDownloadDirectory."
fi

# If you choose to hardcode API information into the script, set one or more of the following values:
#
# The username for an account on the Jamf Pro server with sufficient API privileges
# The password for the account
# The Jamf Pro URL

# Set the Jamf Pro URL here if you want it hardcoded.
jamfpro_url=""	    

# Set the username here if you want it hardcoded.
jamfpro_user=""

# Set the password here if you want it hardcoded.
jamfpro_password=""	

# If you do not want to hardcode API information into the script, you can also store
# these values in a ~/Library/Preferences/com.github.jamfpro-info.plist file.
#
# To create the file and set the values, run the following commands and substitute
# your own values where appropriate:
#
# To store the Jamf Pro URL in the plist file:
# defaults write com.github.jamfpro-info jamfpro_url https://jamf.pro.server.goes.here:port_number_goes_here
#
# To store the account username in the plist file:
# defaults write com.github.jamfpro-info jamfpro_user account_username_goes_here
#
# To store the account password in the plist file:
# defaults write com.github.jamfpro-info jamfpro_password account_password_goes_here
#
# If the com.github.jamfpro-info.plist file is available, the script will read in the
# relevant information from the plist file.

if [[ -f "$HOME/Library/Preferences/com.github.jamfpro-info.plist" ]]; then

     if [[ -z "$jamfpro_url" ]]; then
          jamfpro_url=$(defaults read $HOME/Library/Preferences/com.github.jamfpro-info jamfpro_url)
     fi

     if [[ -z "$jamfpro_user" ]]; then
          jamfpro_user=$(defaults read $HOME/Library/Preferences/com.github.jamfpro-info jamfpro_user)
     fi

     if [[ -z "$jamfpro_password" ]]; then
          jamfpro_password=$(defaults read $HOME/Library/Preferences/com.github.jamfpro-info jamfpro_password)
     fi

fi

# If the Jamf Pro URL, the account username or the account password aren't available
# otherwise, you will be prompted to enter the requested URL or account credentials.

if [[ -z "$jamfpro_url" ]]; then
     read -p "Please enter your Jamf Pro server URL : " jamfpro_url
fi

if [[ -z "$jamfpro_user" ]]; then
     read -p "Please enter your Jamf Pro user account : " jamfpro_user
fi

if [[ -z "$jamfpro_password" ]]; then
     read -p "Please enter the password for the $jamfpro_user account: " -s jamfpro_password
fi

echo ""

# Remove the trailing slash from the Jamf Pro URL if needed.
jamfpro_url=${jamfpro_url%%/}

# Remove the trailing slash from the ProfileDownloadDirectory variable if needed.
ProfileDownloadDirectory=${ProfileDownloadDirectory%%/}

DownloadProfile(){

	# Download the profile as encoded XML, then decode and format it
	echo "Downloading Configuration Profile..."
	FormattedProfile=$(curl -su "${jamfpro_user}:${jamfpro_password}" -H "Accept: application/xml" "${jamfpro_url}/JSSResource/osxconfigurationprofiles/id/${ID}" -X GET | xpath '/os_x_configuration_profile/general/payloads/text()' 2>/dev/null | perl -MHTML::Entities -pe 'decode_entities($_);' | xmllint --format -)

	# Identify and display the profile's name
	DisplayName=$(echo "$FormattedProfile" | awk -F'>|<' '/PayloadDisplayName/{getline; print $3; exit}')
	echo "Downloaded profile is named: $DisplayName"

	# Save the downloaded profile
	echo "Saving ${DisplayName}.mobileconfig file to $ProfileDownloadDirectory."
	echo "$FormattedProfile" > "$ProfileDownloadDirectory/${DisplayName}.mobileconfig"

}

profiles_id_list=$(curl -su "${jamfpro_user}:${jamfpro_password}" -H "Accept: application/xml" "${jamfpro_url}/JSSResource/osxconfigurationprofiles" | xpath //os_x_configuration_profile/id 2>/dev/null)

profiles_id=$(echo "$profiles_id_list" | grep -Eo "[0-9]+")

for ID in ${profiles_id}; do

   DownloadProfile

done