This guide applies to Mac computers and Windows devices
In Okta Workflows, the connector is still listed as Kandji. The steps in this guide that create an API token and copy your domain are performed in Iru Endpoint. When you configure the connection in Okta Workflows, select Kandji and enter your Iru Endpoint API token and domain.
About Authorizing Your Iru Tenant for Okta Workflows
Authorizing your Iru Endpoint tenant for Okta Workflows lets Okta Workflows connect to your tenant through the Kandji connector, so you can automate device management tasks in your workflows.How It Works
The Kandji connector in Okta Workflows connects to your Iru Endpoint tenant using an API token and domain. After you configure the connection, you can build workflows that respond to user lifecycle events and device management tasks without manual steps in Iru Endpoint.Prerequisites
Before you begin, ensure you have:- Okta Workflows admin credentials
- Iru Endpoint administrator access
- API access enabled in your Iru Endpoint tenant
Authorizing Your Iru Tenant
Authorization has two parts: create an API token and copy your domain in Iru Endpoint, then configure the Kandji connector in Okta Workflows with those values. When you add a Kandji card to a workflow for the first time, Okta Workflows prompts you to configure the connection. You can save the connection and reuse it for future workflows.You can create and manage multiple connections from your Connections page.
Creating an API Token in Iru Endpoint
Complete these steps in the Iru Endpoint web app. To create an API token for the Kandji connector in Okta Workflows:
Add Token Description
In the Description field, enter a description such as Allow Okta Workflows to use the Iru Endpoint API.
Store Token Securely
Store the copied token in a safe place. If you lose the text for the token, you can delete it before you use it and create a new one with the steps above. You’ll use this token in step 4 of the next section.
Confirm Token Copy
Select the checkbox for I have copied the token and understand that I will not be able to see these details again.
Select Permissions
In the Permissions section, select the checkbox for each area to which you want Okta Workflows to have access. For example, select the checkbox for Blueprints Management to enable all permissions for inspecting and modifying Blueprints. Note: You can click the disclosure triangle to the right of the permission type to display more specific permissions.
Setting Up the Kandji Connector in Okta Workflows
Complete these steps in Okta Workflows. You need the API token and domain from the previous section. You can create more than one connection. For example, you might have multiple Iru Endpoint tenants or be testing multiple API tokens. The API token must include at least Devices: Device Information: Device list permission. Grant additional permissions based on the workflow actions you plan to use. For example, to list all devices, the token needs:| Permission | Description |
|---|---|
| Devices: Device Information: Device list | Get a list of all devices in the Iru Endpoint tenant |
| Devices: Device Information: Device details | Get the full details for a specific device |
Create New Connection
In Okta Workflows, from the Connections page or any card, click New Connection.
Select the Kandji connector
In the New Connection window, scroll if necessary, then select Kandji. This is the connector name in Okta Workflows; it connects to your Iru Endpoint tenant.
Configure Connection Nickname
In the Connection Nickname field, enter a unique name that will help you distinguish multiple Iru Endpoint tenants or multiple Iru Endpoint API keys.
Enter API Key
In the API key field, enter or paste the text of the API token you generated in step 7 of the previous section.
Enter domain
In the Kandji domain field, enter your full Iru Endpoint domain from step 16 of the previous section. Okta Workflows labels this field Kandji domain, but the value is your Iru Endpoint API URL (for example, accuhive.api.kandji.io or accuhive.api.eu.kandji.io).
Using the Connection in Workflows
Select Kandji
In the My Connected Apps section, click Kandji. Okta Workflows still displays this app name; it provides access to your Iru Endpoint tenant.
