To connect the Vanta Kandji integration, you will need to create a Kandji API token to use with Vanta.


The Vanta Kandji integration is included in all Kandji plans at no additional cost. To activate your integration and obtain an API key, please reach out to your Kandji representative or contact support@kandji.io. The set of permissions required for the integration are given below.

API Token

Ensure Kandji API Token in your Kandji dashboard has the right permissions. This token needs the following APIs enabled:

    • Device - “/device/{device_id}”
    • Device list - "/devices"
    • Device details - "/devices/{device_id}/details"
    • Application list - "/devices/{device_id}/apps"
    • Device library items - "/devices/{device_id}/library-items"

KandjiInstructions_1.png

Once all these steps are complete, you should be ready to create the connection in Vanta!


Vanta Integration

  • First, find out your Kandji API subdomain. You can find your API subdomain in Settings > Access in your Kandji dashboard. Typically your API URL will follow the format of https://<subdomain>.clients.us-1.kandji.io. Read the API page for more information.
  • Then, input the subdomain and the API token into the Vanta connection page with Kandji. Vanta will validate these credentials and establish the connection.
  • One benefit of using this integration is that you do not need to install the Vanta Agent on any machines managed through Kandji. Vanta will detect information directly from Kandji for Mac machines managed by this service. Machines not managed by Kandji should still use the Vanta agent.