Kandji SAML Integration Guide

1. Log in to the Kandji Web App
2. In the left sidebar, click Settings
3. Click the Access tab
4. Scroll to the Authentication section
5. Click Add
6. Select Custom SAML, then click Next

Fill the form with the following fields:

7. Click Save

1. The connection will appear in the Authentication section as Disabled
2. On the right, click the ellipsis menu (⋮) and select Enable

1. In Kandji, go to Settings → Access
2. Click New User in the Admin Team section
3. Enter the user’s information
4. Click Submit
5. The user will receive an invitation email

1. In SplitSecure, navigate to Secure Accounts → Create Account → Kandji
2. Enter a name for your account
3. Select the Identity Provider used in the Kandji configuration
4. Configure the Service Provider details:

5. Click Create Account

Once SSO is working, you can disable standard authentication to enforce SSO-only access.

1. Navigate to your Kandji tenant URL
2. Click Sign in with your Identity Provider (or select the SSO connection)
3. You should be redirected to SplitSecure
4. Enter your email address when prompted (should correspond to an existing email in the admin team)
5. Click Request Access
6. Complete the authentication flow
7. Upon success, you’ll be logged into the Kandji Web App