Kandji MDM
  • 25 Mar 2025
  • 2 Minutes to read
  • Dark
    Light

Kandji MDM

  • Dark
    Light

Article summary

Kandji MDM (Mobile Device Management) is a cloud-based platform for managing Apple devices (Mac, iPhone, iPad, and Apple TV). It helps IT teams deploy, configure, monitor, secure and enforce policy at scale to ensure compliance. For more information, refer to Kandji’s official documentation.

Integration Method: API

Table: Device Inventory Info (5001), Software Inventory Info (5020)

This integration supports the following events.

Events

Description

Devices and Apps

Captures detailed device information along with a list of installed applications, including their metadata, versions, and installation details.

This integration supports the following versions.

Kandji agent version Supported

4.6.7 (5238)

Kandji MDM API

v1

Prerequisites

  • The user should have access to the Kandji portal with an account that has admin access. 

  • The user should have access to the Databee console.

Configuration Overview

  1. Create an API Token with required permissions to fetch the data.

  2. Add Kandji MDM data feed in the DataBee console with the required Client credentials.

    DataBee Parameter

    Kandji Parameter

    API Base URL (<subdomain>, <region>)

    Organization’s API URL

    Token

    Token

Kandji MDM Configuration

  1. Login to the Kandji MDM console.
     

  2. Click on the SETTINGS button.
     

  3. Click on the Access tab.
     

  4. Click on the Add Token button.
     

  5. Enter ‘Name’ and ‘Description’ of Token.
     

  6. Click on the Create button.
     

  7. Click on the Copy Token to copy the token to your clipboard. Ensure you store the token in a secure location, as you will not be able to view it again. Check the checkbox to confirm that the token has been copied.
     

    Note:

    Ensure you store the token in a secure location, as you will not be able to view it again.

  8. Click on the Next button.
     

  9. Click on the Configure button.
     

  10. Click on the Configure permissions button.
     

  11. Select Device list, device details and application list  permissions.

    Permission

    Description

    API Endpoint

    Device list

    Get a list of all devices in the Kandji instance

    /api/v1/devices

    Device details

    Get the full details for a specific device

    /api/v1/devices/{device_id}/details

    Application list

    List all installed applications for a specific device

    /api/v1/devices/{device_id}/apps

    1. Search for Device list and select Device list permission.
       

    2. Search for Device details and select Device details permission.
       

    3. Search for Application list and select Application list permission.
       

    4. Click on the Save button.
       

    5. The permission should be structured as follows.

    6. Click on the Close button.
       

  12. Copy the Organization’s API URL, as it will be required during the DataBee configuration process.
     

DataBee Configuration

  1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
     Inserting image...

  2. Search for Kandji MDM and select it.
     

  3. Click on the API Ingest.
     Inserting image...

  4. Enter feed contact information and click Next.
     

  5. In the configuration page, enter the following:

    • Authorization Method: Bearer Token

    • API Base URL: replace <subdomain> and <region> with your subdomain and region according to your organization's API URL.

    • Token: paste the Token generated earlier in the Kandji MDM portal.

    • Event Types: preselected for all the event types that integration pulls.

    Note:

    The URL for the API endpoint that you use is based on your region. Here, we have used the URL for US region. You can change the URL as per subscription. Below is the list of URLs as per the subscription.

  6. Click Submit.

Troubleshooting Tips

  • If you encounter an Unauthorized error, it may indicate that the authentication token has expired or deleted. In this case, regenerate the token to restore access. To prevent potential issues, consider pasting the token into a text editor to verify that there are no extra spaces or unexpected characters before reconfiguring the DataBee feed.


Was this article helpful?

What's Next
Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.
ESC

Eddy AI, facilitating knowledge discovery through conversational intelligence