Sync Apple devices from Kandji into SimpleAMS

Kandji is a popular modern Mac-fleet MDM, particularly with tech and design companies. Setup in SimpleAMS is a single bearer token plus your Kandji subdomain and region.

1. Find your subdomain and region

Your Kandji URL is https://<subdomain>.kandji.io. Region is US for tenants on *.api.kandji.io and EU for tenants on *.api.eu.kandji.io. Kandji shows the region in Settings → About.

2. Generate an API token in Kandji

1. Log into Kandji as an admin.
2. Go to Settings → Access → API Token.
3. Click Add API Token. Name it SimpleAMS.
4. Grant the following permissions: Device list, Device details, Device ID, Update a device.
5. Copy the token - it's shown only once.

3. Paste into SimpleAMS

1. Go to Settings → Integrations → Kandji.
2. Enter your subdomain (just the bit before .kandji.io).
3. Enter the region: us or eu.
4. Paste the API token.
5. Tick Enable this integration and save.

4. Run a sync

Click Sync now. SimpleAMS calls Kandji's /api/v1/devices endpoint with offset pagination (300 per page) and creates or updates an asset row per device. Daily after that.

5. What gets imported

• Every device Kandji is currently managing - Macs, iPhones, iPads, Apple TVs.
• Asset tag = Kandji's asset_tag field if set, else the serial number.
• Model name from Kandji's model field.
• Manufacturer is set to Apple.
• Assigned user comes from the device's primary user email, matched to your existing staff by email.

6. Tips

• The API token is read-mostly. Don't grant write permissions you don't need - SimpleAMS only reads device data today.
• Kandji returns HTTP 429 on rate-limit; the sync retries once honouring the Retry-After header before failing the batch.
• If a device is in both Kandji and another MDM (unusual), the last sync wins by asset_tag - decide which is authoritative and enable only one.