Kandji MDM integration guide

👉 Note! MDM integrations are only available on the Standard and Pro billing plans and require activation upon request. Please contact Velory Support for more information.

🧭 In this guide:

• How to connect Kandji MDM with Velory
• How it works
  • Enrolled & Unmatched Devices
  • Certificate & Token Information
  • Data Import
• Additional Reports
• Disconnect
• Questions and Answers
   

How to connect Kandji MDM with Velory

1. Go to your profile in the navigation bar and click Settings.
    
2. Under Integrations, select Connections.
    

You'll see a list of available MDM solutions. To begin the integration with Kandji, click Connect next to it.

You'll be asked to enter your Kandji MDM credentials. Clicking Read more will direct you to Kandji’s support documentation with detailed steps on how to collect the required information.

Before connecting, ensure your Kandji API key includes the following permissions:

• To enable token expiration alerts:
  
  
  • List integrations
    
    
  • Get integration
    
    
• To retrieve device details:
  
  
  • List devices
    
    
  • Get device details
    
    

Once the API key and subdomain are entered and you click Connect, a new integration will be established. Device data will begin syncing within about 2 minutes and continue to sync automatically every night.

How it works

Once the Kandji integration is active, you'll have access to a dedicated dashboard showing:

• Devices that are currently enrolled
   
• Devices that are unmatched with assets in Velory

Enrolled & Unmatched Devices

Click Enrolled Devices or Unmatched Devices in the connection view to navigate directly to the Hardware Overview. Relevant filters will be applied automatically, and you can further filter devices based on status to quickly get the information you need.

Certificate & Token Information

To support seamless device management, Velory notifies IT admins when critical tokens or certificates are about to expire. This helps prevent disruptions by ensuring timely renewals.

• A yellow warning appears 45 days before expiration.
   
• A red warning appears 10 days before expiration if renewal hasn't been completed.
   

These visual alerts appear both on the connection overview page and the MDM connection detail page.

Data Import

Within the Data Import section, you can select which fields to include in the daily sync (at 6:30 AM Stockholm time). All fields are enabled by default. Unchecking a field excludes it from future syncs.

Available Data Fields:

• Model – Device model description
   
• MDM Enrollment Date – When the device was first enrolled in Kandji
   
• Last Check-in – The most recent communication with the MDM
   
• Device OS – Operating system version
   
• Auto Enrolled – Device connected through an enrollment program (e.g. Apple Business Manager, Knox Mobile, Google Zero Touch)
   
• Supervised – Whether the device was automatically enrolled
   
• Device Activation Lock Enabled – If the activation lock is enforced by the MDM
   
• User Activation Lock Enabled – If the user enabled the activation lock (e.g. via Find My iPhone)
   
• Lost Mode Enabled – Indicates if the device has been marked as lost by the MDM
   
• Battery Health – Battery status with the following values:
  • non-genuine – Not a genuine Apple battery
     
  • normal – Battery functioning normally
     
  • service-recommended – Service is recommended
     
  • unknown – Status could not be determined
     
  • unsupported – Battery health not supported

View Apple’s documentation

• Total Storage Capacity – Total available space on the device
   
• Available Storage Capacity – Currently available storage
   
• User Full Name – The assigned user name from the MDM system
   

All enabled data points will appear on each device's detail page.

Additional Reports

In addition to the standard integration features, you can request access to a custom reporting dashboard, which includes:

• Comparisons between assets in Velory and Kandji
   
• Enrollment statistics and trends
   

To activate these reports, contact support@velory.com and we’ll help you get started.

Disconnect

To remove the Kandji integration, simply click Disconnect Kandji on the connection details page.

When disconnected, all MDM-related data will be removed from Velory, including:

• Connection page
   
• Hardware overview
   
• Device details
   
• CSV exports
   

If you'd like to keep a copy of the data before disconnecting, we recommend exporting the Data with CSV first.

If the connection is inactive and you want to restore it, try disconnecting and reconnecting. If that doesn’t resolve the issue, please contact Velory Support.

Questions and Answers