Centrify Delivers Turnkey Solution for Mac Application Management with Munki

Centrify Delivers Turnkey Solution for Mac Application Management with Munki

By Centrify Contributor III on ‎04-24-2017 01:59 PM

Centrify Delivers Turnkey Solution for Mac Application Management with Munki


In the 17.4 update to the Centrify Identity Service we have integrated our Mac management solution with the Munki open source project to deliver a turnkey service for Mac application management that provides a self-service enterprise app store with an awesome end user experience.


blog1.pngCentrify Munki Managed Software Center 


Munki is an open source project from Walt Disney Animation Studios. It is essentially a set of tools written primarily in python that run on a Mac that allow IT administrators to manage software installs on Mac machines.  It’s been in development for a quite a few years now, and has seen significant adoption from businesses both small and large.


For a deeper look into what Munki is all about you can visit the Munki open source project and the corresponding wiki pages which serve as documentation for Munki.






To help understand why Centrify is integrating Munki into our cloud based Mac management solution and what distinguishes our implementation from a standard Munki solution please watch the following short video:



There are two primary advantages we set out to provide to our customers by bringing this solution to our platform


Stop the breach at the endpoints

  • End users often have admin rights just so they can install software needed to do their job
  • Unfortunately, they also have the right to install malicious software
  • Most breaches originate from end users’ systems


Providing a secure, highly available and turnkey Munki solution

  • Secure access to the enterprise app store for trusted endpoints
  • Make applications and updates available from anywhere
  • Simplify the deployment of Munki for admins and end users


In addition to the above benefits, admins will benefit from a GUI interface to their Munki application repository as found in the Centrify Admin Portal:


blog2.pngCentrify Munki Repository in the Admin Portal

Admins can leverage open source tools including Munki, AutoPkg and or AutoPkgr (note the ‘r’ at the end) to update their Munki repo in the Centrify cloud.


As a part of our integration, Centrify has collaborated with the Munki open source developer community to propose and contribute to a plugin schema for Munki. Our version of the Munki tools currently includes support for this new plugin architecture. This is how we are able to route all Munki repository writes directly to a customer’s tenant in our cloud. I’m excited with how the community has received these improvements, and it appears that it will be included in the Munki 3 release which is expected soon and currently in beta.


Setup of the Munki server and hosting of applications is very quick and easy. Here is a short video to demonstrate the process from start to finish:



Installation and configuration on target Macs is a one step process. Just enroll the Mac in the Centrify Identity Service and the Managed Software Center will automatically be installed and configured to securely connect to your private application repository. Mac users will immediately benefit from an enterprise app store that they are familiar with as it mirrors the experience Apple provides in the built-in Mac Apple App store.


blog3.pngApple App Store like user experience

The self-service app catalog ensures end users without admin rights can install and remove approved applications at their leisure regardless of whether they are on the corporate network. In addition, required apps are installed and kept up to date silently without user interaction.


For more details on the end user experience with Munki and Centrify, please view the following video:



It takes just a few minutes to get going with Munki on the Centrify Identity Service, so give it a shot and let us know what you think.


Thank you,


Peter Havens

Director of Product Management


Showing results for 
Search instead for 
Do you mean 

Community Control Panel