Configure Apps and Books

By Salur Onural

Initial configuration of Apps and Books

Apps and Books (formerly VPP) allows you to distribute App Store Apps to your organization’s devices. For more information on adding Apps from Apps and Books, you can read our guide here.

You cannot share the same Apps and Books token across multiple MDM servers in Apple Business Manager (ABM). It is highly recommended that you create a new location in ABM specifically for your Kandji tenant and use a dedicated Apps and Books token.

To configure Apps and Books, take the following steps:

  1. Create a new location in Apple Business Manager.
  2. Navigate to Settings in the left-hand navigation bar.
  3. Select the Apple Integrations tab.
  4. Click the Configure button inside Apps and Books.
In the new window, you will be asked to sign in to Apple Business Manager to complete the final steps for integration.
  1. In Apple Business Manager, navigate to your profile on the bottom-left and select Preferences.
  2. Click on your name at the bottom of the sidebar, click Preferences, then click Payments and Billing.
  3. Download your Apps and Books Location Token.
    Note: Each Server Token in this list is based on a Location in Apple Business Manager.


  4. Navigate back to the Kandji Web App and upload your token.
  5. Click Complete Apps and Books Setup.
Once you have the Apps and Books integration completed, you will have the option to update apps when Kandji detects a new version automatically.

Manually Syncing Apps and Books with Apple Business Manager 

Kandji periodically checks for new apps or license changes.  If you need to trigger a sync between Kandji and Apple Business Manager immediately, you can use the Sync Now button under the ellipses next to the App Store Apps heading.

Remove Apps and Books (VPP) License

  1. Navigate to Library then App Store apps and select the app you need to remove the license for.
  2. Next, click the blue Edit button on the bottom right.
  3. Lastly, select the drop-down arrow next to Blueprint, then deselect the Blueprint that is associated with the license that needs to be removed and click the blue Save on the bottom right.
Within 5-10 mins of a successful MDM check-in, the application will remove itself from the device’s Applications folder and free up a license to be assigned to a different Blueprint and or device.

For more information on available Kandji integrations, you can read our Integrations Overview.