# Laptops and devices

> Connect Kandji, Jamf Pro or Microsoft Intune and a shipping partner like Firstbase. New hires get a laptop before day one, leavers get a return kit, and IT locks or wipes a device only when they choose.

Audience: Administrators

Kind: How-to guide

Canonical: https://shuffl.ai/docs/devices

<a id="how"></a>
## How it works

Device management lists every laptop. Shuffl reads it daily and matches each device to People by work email. It flags an OS update, encryption off, a missed check-in, no passcode or the firewall off.

A shipping partner sends laptops and return kits. A playbook step prepares the order or the kit; nothing ships until HR or IT sends it from Devices.

<a id="connect"></a>
## Connect device management and shipping

1. Open Apps → Devices and choose Connections.

2. Under Device management, choose Kandji, Jamf Pro or Microsoft Intune. Paste what the dialog asks for, as its steps describe, and choose Connect.

3. Shuffl checks the credential and reads the fleet straight away. Under Shipping partner, connect Firstbase the same way.

- [Open Devices](https://shuffl.ai/app/apps/devices)

<a id="credentials"></a>
## What each one asks for

Kandji: an API token allowed to list devices, lock and erase, and your tenant’s API URL. Jamf Pro: an API client with Read Computers, Send Computer Remote Lock Command and Send Computer Remote Wipe Command, and your jamfcloud.com address.

Microsoft Intune: an app registration with the DeviceManagementManagedDevices.Read.All and PrivilegedOperations.All application permissions. Firstbase: an API key from its admin settings.

<a id="new-hires"></a>
## Laptops for new hires

Add a form step that asks Where to ship your laptop. The address is sealed, only the shipping partner sees it, and it is deleted once the laptop arrives.

Add a Laptop step to HR a few days later. On its day Shuffl prepares the order and HR gets a card with Review the order. The hire hears when it ships and when it arrives.

- [How playbooks work](https://shuffl.ai/docs/playbooks)

<a id="leavers"></a>
## Return kits for leavers

The Leaving playbook sends HR a Send a return kit step before the last day. Sending it asks the partner for a box and a prepaid label for the devices listed for them.

Once the laptop is back, lock or wipe it from the fleet. The Hires tab on each playbook shows where every laptop and return kit stands.

<a id="lock-wipe"></a>
## Lock or wipe a device

Shuffl never locks or wipes on its own. Choose … on a device, then Lock or Wipe. A lock shows a message on the screen and an unlock PIN once; Shuffl doesn’t keep it.

A wipe erases everything at the next check-in. Type the last four characters of the serial to confirm. Mello can prepare a lock, but a wipe is always run on Devices.

<a id="everyone"></a>
## What employees see

Everyone sees their own laptop under Apps → Devices, with anything it needs and how to fix it, and any laptop or return kit on its way. They can ask Mello “Where’s my laptop?” too.

## Related guides

- [Playbooks and onboarding](https://shuffl.ai/docs/playbooks)

- [When someone leaves](https://shuffl.ai/docs/when-someone-leaves)

- [Route requests to your helpdesk](https://shuffl.ai/docs/helpdesk-routing)

Agent documentation index: https://shuffl.ai/llms.txt