Skip to main content
Use Iru actions in workflows to automate device management, security operations, blueprint assignments, and device recovery.

​
Actions

Retrieves all devices associated with a user from Iru, returning comprehensive device information including security status, hardware details, and management state. Optionally filter by platform to target specific device types. Use this to identify user devices before performing other Iru operations.Input fields:
  • iruDevicePlatforms - Optional platform filter (Mac, iPad, iPhone, Apple TV, Android, Windows). Select multiple platforms or leave empty to retrieve all devices.
Output data:
  • devices - Array of devices with detailed information:
    • User assignment (name, email)
    • Security status (MDM enabled, agent installed)
    • Blueprint assignment
    • Device metadata (display name, platform, OS version, model, serial number, last check-in)
Common use cases:
  • List all devices assigned to a user
  • Filter for specific device types (e.g., only Mac or iPhone devices)
  • Verify device ownership and security status before granting access
  • Retrieve device IDs (iruDeviceId) to use in subsequent actions
  • Audit device inventory with comprehensive metadata
  • Check MDM enrollment and agent installation status
Locks a device remotely through Iru MDM to secure lost, stolen, or compromised devices. Returns a 6-digit unlock PIN that can be shared with the user.Input fields:
  • iruDeviceId - Device ID to lock (retrieve from Get User Devices action output)
Output data:
  • unlockPin - 6-digit PIN needed to unlock the device
Common use cases:
  • Lock lost or stolen devices immediately
  • Secure compromised devices during security incidents
  • Enforce device security policies for non-compliant devices
  • Remotely secure devices during employee offboarding
Performs a remote wipe of a device with configurable options for different platforms. Generates a 6-digit PIN for Find My on macOS if one is not provided.Input fields:
  • iruDeviceId - Device ID to erase (retrieve from Get User Devices action output)
  • pin (optional) - Six-character PIN for Find My (macOS 10.8+). Ignored for iOS/iPadOS/tvOS. A random 6-digit PIN is auto-generated if not provided.
  • preserveDataPlan (optional, default: true) - Preserve the data plan on iPhone/iPad with eSIM (iOS 11+)
  • disallowProximitySetup (optional, default: false) - Disable Proximity Setup on next reboot (iOS 11+)
  • returnToServiceEnabled (optional) - Automatically re-enroll device after erasure (iOS 17+, iPadOS 17+)
  • returnToServiceProfileId (optional) - Wi-Fi profile ID for Return to Service when device lacks ethernet
  • eraseMode (optional) - Erase mode for Windows devices: WIPE, WIPE_CLOUD, or WIPE_PROTECTED
  • eraseFlags (optional) - Erase options for Android devices: WIPE_EXTERNAL_STORAGE, WIPE_ESIMS
Output data:
  • pin - The 6-digit PIN used for the erase (user-provided or auto-generated)
Common use cases:
  • Wipe lost or stolen devices
  • Decommission devices during employee offboarding
  • Factory reset devices for redeployment
Retrieves the FileVault recovery key for a macOS device that has escrowed its encryption key with Iru.Input fields:
  • iruDeviceId - Device ID to retrieve the FileVault recovery key for
Output data:
  • endpointDiskEncryptionKey - The FileVault recovery key for the device
Common use cases:
  • Help users recover access to encrypted macOS devices
  • Retrieve escrowed FileVault keys for device recovery
  • Support disk recovery scenarios when users forget their password
Retrieves both user-based and device-based Activation Lock Bypass Codes for an Apple device.Input fields:
  • iruDeviceId - Device ID to retrieve Activation Lock Bypass Codes for
Output data:
  • endpointActivationLockBypassCodeUser - The user-based Activation Lock Bypass Code
  • endpointActivationLockBypassCodeDevice - The device-based Activation Lock Bypass Code
Common use cases:
  • Bypass Activation Lock on devices being reassigned
  • Recover locked devices during employee offboarding
  • Resolve Activation Lock issues after device wipe
Retrieves the recovery lock password for a device managed by Iru.Input fields:
  • iruDeviceId - Device ID to retrieve the recovery lock password for
Output data:
  • endpointRecoveryLockPassword - The recovery lock password for the device
Common use cases:
  • Unlock Apple Silicon Macs with recovery lock enabled
  • Access macOS Recovery on firmware-locked devices
  • Support device troubleshooting that requires recovery mode
Sends a blank push notification to a device, triggering an immediate check-in with the MDM server without waiting for the next scheduled check-in.Input fields:
  • iruDeviceId - Device ID to send a blank push to
Common use cases:
  • Wake up a device for immediate MDM command execution
  • Force a device to check in before applying configuration changes
  • Trigger device status update on demand
Forces a daily check-in on a device to update device inventory and status information in Iru.Input fields:
  • iruDeviceId - Device ID to perform a daily check-in on
Common use cases:
  • Refresh device inventory data on demand
  • Update device status before running compliance checks
  • Force reporting of installed apps and security settings
Assigns an Iru blueprint to a device, applying the configuration profile and policy set defined in the blueprint. Use this to enforce device configurations, security policies, and software deployment.Input fields:
  • iruDeviceId - Device ID to assign the blueprint to (retrieve from Get User Devices action output)
  • iruBlueprintId - The Iru blueprint to assign to the device
Output data:
  • iruBlueprintId - The ID of the assigned blueprint
Common use cases:
  • Apply department-specific configurations to devices
  • Enforce security policies based on device role or user group
  • Automate device configuration during onboarding
  • Update device policies when users change roles or teams