.png)
Connect Rippling to Kandji to automate Apple device enrollment and configuration tied to employee onboarding and offboarding.
The Rippling–Kandji integration connects Rippling's HR-driven device assignment to Kandji's Apple-focused MDM platform. New hires' Mac and iOS devices are automatically enrolled in Kandji with role-appropriate configuration profiles (Kandji Blueprints) based on Rippling department data. At offboarding, devices can be remotely locked or wiped through Kandji.
Companies adopting Kandji for its simpler interface sometimes don't fully configure Blueprint assignment by department, resulting in all devices receiving the same generic configuration regardless of the employee's actual role and security requirements.
thePeopleStack configures the trigger logic between Rippling employee events and Kandji's Blueprint-based device configuration, ensuring new hires receive properly configured Apple devices and offboarded employees' devices are secured immediately.
Kandji deployments for thePeopleStack's Rippling clients are structured around US Apple fleet management, with automated configuration tied to Rippling department and role data.
Canadian and cross-border operations: for Canadian employees, Kandji device provisioning follows the standard workflow, with logistics for cross-border device shipping addressed as needed.
Kandji is an Apple-only MDM platform known for its modern interface and pre-built compliance templates, often chosen by companies wanting simpler Apple fleet management than Jamf's more complex configuration options.
Yes. New hire records in Rippling can trigger automatic enrollment in Kandji with pre-configured Blueprints (Kandji's term for device configuration templates) based on department or role.
Kandji includes pre-built compliance templates for frameworks like CIS benchmarks, which can support broader compliance programs when paired with Rippling and a platform like Vanta or Drata.
Rippling can trigger remote lock or wipe commands through Kandji when an employee is offboarded, securing company data on the device immediately.
Standard configuration takes 2–4 hours.
