Skip to main content
Iru is the unified platform that brings together Endpoint, Identity, and Compliance capabilities. It builds on the foundation of Kandji with a fresh interface, enhanced features, and expanded capabilities designed for the complex security and management needs of modern organizations.Apple is still our foundation, and managing Apple devices securely remains a top priority. We’re just as committed to building best-in-market Apple solutions, with a dedicated team that’s growing and focused only on Apple.The upgrade to Iru brings several important changes to the platform:
  • New look and feel: The navigation interface features updated branding with the Iru logo and jellyfish icon, a new top navigation bar with enhanced search and Iru AI, and a refreshed sidebar design with customizable sections
  • New support & knowledge base experience: Iru Support Chat is available directly from the top navigation bar, and the new Support Knowledge Base is now located at docs.iru.com
  • New domain: Your tenant URL changes from {{subdomain}}.kandji.io to {{subdomain}}.iru.com, and the enrollment portal link moves from {{subdomain}}.kandji.io/enroll to {{subdomain}}.iru.com/enroll
  • New authentication service: As part of our transition to Iru, we’ve introduced a new authentication platform that replaces our previous provider. We built it specifically for complex authentication and authorization use cases, and it sets the foundation for advanced features like granular roles, permissions, and fine-grained access controls.
  • No impact to end users: End users don’t need to take any action at this time. They’ll notice a slightly updated login experience during device enrollment and the new enrollment portal domain, but everything else remains the same.

​
User Interface Changes

​
Branding and Navigation

  • New branding: The Kandji logo and bee icon have been replaced with the Iru logo and jellyfish icon throughout the platform
  • Enhanced search: The top navigation bar now includes “Search or ask Iru AI” with keyboard shortcut support (⌘K)
  • Iru Support Chat: Access Iru Support Chat via the chat bubble icon in the upper right corner of the top navigation bar, next to Iru AI
    Navigation bar showing the chat bubble icon for Iru Support Chat in the upper right corner, next to Iru AI
  • Updated sidebar: The left navigation sidebar features a refreshed design with new promotional cards highlighting Identity and Compliance features. These can be easily hidden, see below.
  • Customizable sidebar: You can hide sections and promotional cards you’re not using to focus on what matters to you. Select your name, followed by Customize sidebar in the left navigation, then toggle Endpoint, Identity, or Compliance sections on or off based on your needs

​
Access Page

After you complete the upgrade, the Access page will be visible by clicking on your name at the bottom of the left-hand navigation. This page will show your new authentication configuration instead of the upgrade prompt.
Access page showing new authentication configuration with connection settings, passkey registration, session length controls, and connection scoping options
Here you’ll manage:
  • Connection settings for SAML, Microsoft, and Google SSO
  • Passkey registration and invitations
  • Session length controls
  • Connection scoping for specific user groups
The upgrade card you see during the transition process will disappear once upgrade is complete, replaced with these new authentication management options.

​
Relocated Features

Several features have moved to new locations in the Iru interface:
  • Alerts: Now accessible via the bell icon in the top navigation bar
  • Activity: Now accessible via the pulse icon in the top navigation bar
  • Enrollment: Moved to the bottom of the Endpoint menu
  • Integrations: Moved to the menu located at the bottom of the left navigation, accessed by clicking your name, then selecting Integrations
  • Apple platform settings: Now located in Integrations (access via your name, then Integrations)
  • Self Service settings: Now configured in the Self Service Settings tab on the Library page

​
New Domain

Your tenant URL changes from {{subdomain}}.kandji.io to {{subdomain}}.iru.com, and the enrollment portal link moves from {{subdomain}}.kandji.io/enroll to {{subdomain}}.iru.com/enroll.After you complete the upgrade, you’ll need to log in using your new Iru domain. Your old Kandji domain will automatically redirect to the new domain.

​
Authentication Improvements

Iru’s new authentication platform includes all the features you rely on today—full support for custom SAML, Microsoft, and Google connections—while adding immediate benefits:

Passkey Support

Replace username + password + MFA for administrators using standard authentication. You get enhanced security with a smoother login experience.

Session Length Controls

Specify a session length per SSO connection, or respect your identity provider’s expiration values—whichever is shorter. You’re in control.

Granular Connection Scoping

Control which users can authenticate with specific connections. This is especially useful if you provide access to external organizations (like an MSP or outsourced helpdesk), where an SSO connection should only authenticate users from a specific domain within your tenant.
Over the years, you’ve asked us for more flexibility in how authentication works inside Kandji:
  • Fine-grained session management
  • Custom session length support
  • Respecting NotOnOrAfter from SAML assertions
  • Support for CAEP (Continuous Access Evaluation Protocol) and SSF (Shared Signals Framework)
  • Better access controls within your tenant
Our current authentication system wasn’t designed for this level of complexity, so we built a unified solution from the ground up. This replacement is designed for our scale and growing needs, and it opens the door to the features you’ve been requesting.While day one is about meeting your existing needs, the platform sets us up to deliver granular roles, permissions, and fine-grained access controls in the months ahead.

​
Supported Authentication Methods

Iru’s new authentication platform supports all your existing connection types:
  • Custom SAML configurations
  • Microsoft SSO
  • Google SSO
  • Social Login (using email + password + MFA)
  • Passkeys

​
Impact on Your Users

​
For Administrators

You’ll need to complete the upgrade process when you’re ready. After upgrade completes, you’ll be signed out and need to re-authenticate with your new configuration. Log in using your new Iru domain at {{subdomain}}.iru.com—your old Kandji domain at {{subdomain}}.kandji.io will automatically redirect to the new domain. Once that’s done, you’ll have access to the new security features and session controls we mentioned earlier.

​
For End Users

End users don’t need to do anything. The only changes they’ll notice are:
  • A slightly updated login experience during device enrollment
  • The enrollment portal link for manual enrollment will change from subdomain.kandji.io/enroll to subdomain.iru.com/enroll
Everything else stays the same.

​
Frequently Asked Questions

You can complete the upgrade when you’re ready. The upgrade process is available when you log in to the Iru web app. Switch to the Upgrade Process tab above for step-by-step instructions.
The upgrade process typically takes just a few minutes, depending on your identity provider and number of connections.
End users don’t need to take any action. They’ll notice a slightly updated login experience during device enrollment and the new enrollment portal domain ({{subdomain}}.iru.com/enroll instead of {{subdomain}}.kandji.io/enroll).
Contact support if you need help with the upgrade process or have questions about the upgrade.
The upgrade process includes a review step where you can confirm your settings before completing the transition.
Ready to upgrade? Switch to the Upgrade Process tab above to follow the step-by-step instructions.