Iru provider sample

These scripts deploy the Watcher client to managed Macs. The audit script checks whether Watcher needs to be installed or repaired, and the remediation script performs that work for the logged-in user.

See MDM rollout for start-on-login, proxy headers, and managed settings.

The remediation script targets a self-hosted Watcher deployment using WorkOS SSO. Adapt its authentication settings if your deployment uses another mode, then test the scripts on a small device group before wider deployment.

Scripts

• audit-macos.sh checks the installation, hooks, login agent, and local service health. A non-zero exit tells Iru to run remediation.
• remediate-macos.sh installs Watcher when absent, repairs hooks, and configures the client to start on login. Set the Watcher URL in the remediation script; the client follows the server version automatically.
• uninstall-macos.sh removes the client while preserving the user's Watcher data by default. Remove the audit-and-remediate assignment before running it, or the next audit can reinstall the client.

Configure Iru

Create a Custom Script Library Item. Add audit-macos.sh as the Audit Script and remediate-macos.sh as the Remediation Script, then configure its frequency and Blueprint scope.