Kandji MDM

Kandji MDM (Mobile Device Management) is a cloud-based platform for managing Apple devices (Mac, iPhone, iPad, and Apple TV). It helps IT teams deploy, configure, monitor, secure and enforce policy at scale to ensure compliance. For more information, refer to Kandji’s official documentation.

Integration Method: API

Table: Device Inventory Info (5001), Software Inventory Info (5020)

This integration supports the following events.

This integration supports the following versions.

Prerequisites

• The user should have access to the Kandji portal with an account that has admin access. 

• The user should have access to the Databee console.

Configuration Overview

1. Create an API Token with required permissions to fetch the data.

2. Add Kandji MDM data feed in the DataBee console with the required Client credentials.

   DataBee Parameter	Kandji Parameter
   API Base URL (<subdomain>, <region>)	Organization’s API URL
   Token	Token

Kandji MDM Configuration

1. Login to the Kandji MDM console.
    
   

2. Click on the SETTINGS button.
    

3. Click on the Access tab.
    

4. Click on the Add Token button.
    

5. Enter ‘Name’ and ‘Description’ of Token.
    

6. Click on the Create button.
    

7. Click on the Copy Token to copy the token to your clipboard. Ensure you store the token in a secure location, as you will not be able to view it again. Check the checkbox to confirm that the token has been copied.
    

   Note:

   Ensure you store the token in a secure location, as you will not be able to view it again.

8. Click on the Next button.
    

9. Click on the Configure button.
    

10. Click on the Configure permissions button.
     

11. Select Device list, device details and application list  permissions.

    Permission	Description	API Endpoint
    Device list	Get a list of all devices in the Kandji instance	/api/v1/devices
    Device details	Get the full details for a specific device	/api/v1/devices/{device_id}/details
    Application list	List all installed applications for a specific device	/api/v1/devices/{device_id}/apps

    1. Search for Device list and select Device list permission.
        

    2. Search for Device details and select Device details permission.
        

    3. Search for Application list and select Application list permission.
        

    4. Click on the Save button.
        

    5. The permission should be structured as follows.

       

    6. Click on the Close button.
        

12. Copy the Organization’s API URL, as it will be required during the DataBee configuration process.
     

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for Kandji MDM and select it.
    

3. Click on the API Ingest.
    

4. Enter feed contact information and click Next.
    

5. In the configuration page, enter the following:

   • Authorization Method: Bearer Token

   • API Base URL: replace <subdomain> and <region> with your subdomain and region according to your organization's API URL.

   • Token: paste the Token generated earlier in the Kandji MDM portal.

   • Event Types: preselected for all the event types that integration pulls.

   

   Note:

   The URL for the API endpoint that you use is based on your region. Here, we have used the URL for US region. You can change the URL as per subscription. Below is the list of URLs as per the subscription.

   • US - https://SubDomain.api.kandji.io

   • EU - https://SubDomain.api.eu.kandji.io

6. Click Submit.

Troubleshooting Tips

• If you encounter an Unauthorized error, it may indicate that the authentication token has expired or deleted. In this case, regenerate the token to restore access. To prevent potential issues, consider pasting the token into a text editor to verify that there are no extra spaces or unexpected characters before reconfiguring the DataBee feed.