Migrating to Kandji - MacOS

This article describes the expected user experience when transitioning from Filewave to Kandji on MacOS devices. If you have any trouble, or experience something other than what is shown below, please contact the help desk at service.jaars.org.

All current MacOS users should possess administrative rights on their Mac device. You can confirm this by checking under System Settings > Users & Groups. If you are not an administrator please contact the JAARS Service Desk for assistance.

Once we remove the Filewave MDM profile from your JAARS MacOS device, the Kandji MigrationAgent will automatically start the device enrollment process. You will see this notification in the top right corner of your screen.

Hover over the notification, click on Options > Details to authorize the device enrollment.

On the Profile page, when you see the Allow Device Enrollment prompt, click on Allow.

Enter the password for your Mac computer to authorize the enrollment.

Next, you should see a registration screen from Kandji. You will be presented with a Microsoft sign-in screen, but you will use your normal JAARS email address and password.

Click Yes on the following screen when asked if you want to stay signed in.

Following the enrollment process you should see the Kandji managed profiles begin to appear.

You may see additional notifications like the following as Kandji continues to configure your device.

After your device is enrolled in the Kandji management system your user account will be converted to a Standard user instead of an Administrator. This is intentional for security purposes and we are implementing a system to request temporary elevation of permissions as required which will be documented in a separate article. More details will be available shortly.
*UPDATED* Upon restarting your device you will sign in with your JAARS credentials. Use your JAARS email and password on the sign-in page shown below.

You will be asked to migrate your existing local account. This will preserve your existing profile, including all files and applications, while merging the login with your JAARS identity. Moving forward your local account will be synchronized with your JAARS identity and changes to your JAARS email/IDP password will carry over to your Mac device.

To complete the migration, simply click on the Username drop down to see a list of existing users. There should only be one or two options. If you see a user called Tech, that is a built-in administrator account added by our previous device management system.

Enter your current MacOS login password (if different from your JAARS password) and click Continue.

Finally, click Migrate Account to finish merging your JAARS credentials with your local user. After this, you may sign in with either your local username or your JAARS email address, however we recommend using your full email as that will ensure your password is syncing consistently with your online JAARS credentials. In the event you are without an internet connection you will still be able to sign in with the local username and your last updated JAARS password.

If your MacOS device is not already configured to use Filevault full disk encryption you will be prompted to enable this upon logging in for the first time after Kandji enrollment. Rest assured your recovery key information will be securely stored in our management system if it is ever required. (If Filevault is already enabled on your machine the existing encryption will be recognized and you will not be prompted.)

Encryption will take a few minutes. You may click OK and continue using your device.

It may take some time for all profiles to apply and encryption to complete. You may continue to use your machine as normal while these processes finish. If you encounter any issues please contact the JAARS Service Desk at service.jaars.org.