Article

    Iru (Formerly Kandji)

    3 min read
    Last updated 6 hours ago

    Iru Integration Overview

    The Iru integration pulls device inventory from Iru into Unthread's asset inventory. It syncs all types of devices, with the option to limit to certain types like laptops and phones.

    Setup & Configuration

    • Configured under Settings > Apps & Integrations
    • Requires three fields: Subdomain, Region, and API Token

    Subdomain (base URL)

    In the Subdomain field, enter only your Kandji/Iru subdomain (for example, xai) — not the full hostname (for example, xai.api.kandji.io).

    Generating an API Token in Iru

    • Navigate to the "Access" page in your Iru dashboard
    • In the "API Tokens" section, click "Add Token"
    • You will want to include the following scopes:
      • (Required) Under "Devices", select all scopes for "Device Information"
      • (Optional) Under "Devices", select all scopes for "Device Actions"
        • This is only if you want to be able to take action on devices via Unthread's dashbaord or automations.

    If you want the bare minimum permissions for asset syncing, Unthread only needs access to:

    • Device list: /api/v1/devices
    • Device details: /api/v1/devices/{device_id}/details

    What Gets Synced

    For computers (Macs):

    • Name, serial number, asset tag, last IP address, managed status
    • Make, model, model identifier
    • OS name, version, and build
    • Assigned user info: username, email, real name, position, department, building, room

    For mobile devices (iPhones/iPads):

    • Name, serial number, asset tag, model, model identifier
    • OS version and build
    • Assigned user info (same fields as above)

    How It Works

    • Pull-based sync (no webhooks) — users trigger a sync manually via a "Sync from Iru" button in the Assets list
    • Devices are categorized automatically as Desktop, Laptop, Tablet, or Phone based on the model identifier
    • Device status is mapped as Managed or Unmanaged
    • Devices are linked to Unthread users by matching email addresses
    • If a device is removed from Iru, the corresponding asset is marked as "Removed" on the next sync

    Device Actions

    From an asset's page, you can kick off certain actions related to that device:

    • Lock Device
    • Unlock User Account
    • Restart Device
    • Shut Down Device
    • Erase Device
    image.png

    Note that this will require the Device Actions scopes in your API Token generated in Iru.

    Sync frequency and manual retry

    • By default, the integration runs a daily sync.
    • You can manually retry a sync from the Assets page in the Unthread dashboard ("Sync from Iru").

    API call volume and when device details are fetched

    • The main inventory sync uses the /api/v1/devices endpoint and paginates with a page size of 200 devices per request.
      • Example: for ~3,350 devices, this is about 17 API calls to pull the device list.
    • The per-device details endpoint (/api/v1/devices/{device_id}/details) is not called for every device during the daily sync.
      • It is only called when managing a single device.