Deploying Custom App

[r1sky]

Hi All, 
I'm working with a vendor to deploy their PLM software plugins to our Mac users. The vendor says they can't create a better way to deploy their plugin because their clients "use different methods" to deploy and, essentially, they can't be bothered with it. Since upgrading to Sequoia, I've noticed that their custom .app's don't open without manual interaction in Privacy & Security settings. 
Does anyone have suggestions/advice whether a silent install is even possible? 

Thanks, 
R

[AJPinto]

Check the signing certificate on the application, it does not look to be notarized correctly. This has nothing to do with Jamf or the package. If they are not notarizing their application correctly that is a massive red flag, and macOS wont let it run. I usually don't deploy an application that is not notarized correctly as a baseline rule. You can use xattr to whitelist the app, but again, this is an app developer problem that needs to be fixed and you should not be whitelisting bad application development practices. 

https://developer.apple.com/documentation/security/notarizing-macos-software-before-distribution