Skip to content

Introducing Blueprint Routing

Mike Boylan Mike Boylan
Introducing Blueprint Routing

Today, we’re excited to announce the general availability of Blueprint Routing, a new enrollment capability in Iru that dynamically assigns devices to Blueprints during enrollment, based on device and user attributes collected at that moment.

Device onboarding that is set it and forget it

With Blueprint Routing, admins no longer need to decide where a device belongs before it enrolls. Instead, devices enter through a single intelligent enrollment flow, with Iru routing them automatically to their destination Blueprint just in time.

This eliminates the need to:

  • Pre-assign devices to specific Blueprints
  • Distribute different enrollment codes
  • Manually move devices after enrollment from “placeholder” Blueprints
  • Continuously monitor pre-enrollment device lists and set new assignments

Once Blueprint Routing is configured, admins can truly set it and forget it.

Dynamic assignment during enrollment

Blueprint Routing uses admin-defined routing rules—built with the same, familiar logic as Assignment Maps—to determine where a device should land. Rules are evaluated top-down on a first-match basis, and the device is routed immediately during enrollment.

These rules can evaluate a wide range of attributes, including those already supported by Assignment Maps.

Routing decisions are made only once, during enrollment. After that, the device remains in its destination Blueprint, ensuring a predictable and stable configuration experience.

 

Screenshot 2026-02-18 at 4.00.07 PM

Blueprint Routing + Assignment Maps = ultimate flexibility

Blueprint Routing and Assignment Maps are designed to work together.

  • Blueprint Routing determines which Blueprint a device should belong to at the time of enrollment.
  • Assignment Maps handle ongoing configuration within that Blueprint using conditional logic.

This combination gives admins complete control across the entire device lifecycle:

  • Automated, no-touch enrollment
  • Highly customized configuration
  • No post-enrollment Blueprint “ping-pong”

Together, they create a workflow where devices are enrolled correctly from day one and continue to receive the right configurations automatically, without constant oversight.

Built for modern enrollment at scale

Blueprint Routing supports enrollment across all supported platforms in Iru, and for Apple devices, supports both Automated Device Enrollment (ADE) and manual enrollment flows.

ADE devices assigned to Blueprint Routing remain assigned to Blueprint Routing, allowing them to re-enroll again and again through the same flow, saving admins valuable time.

Full visibility


Blueprint Routing also includes a dedicated activity view that records:

  • Configuration changes
  • Enrollment events
  • Routing actions taken during enrollment

These events also appear in device-level activity logs, giving clear insight into how each device was routed.

Tags for ADE devices

Alongside Blueprint Routing, we’re also introducing the ability to assign tags to pre-enrollment records for ADE devices. These tags can be used in Blueprint Routing rules, and carry through to the enrolled device record for ongoing use in Assignment Map conditional logic.

Blueprint Routing and tags for ADE devices are now available for all Iru Endpoint Management customers.

For more information, see our product documentation:

Recent Articles

Featured image: Iru Quarterly Threat Report: August 2026
Calvin So • 5 min read

Iru Quarterly Threat Report: August 2026

EDR threat detections and responses Iru EDR is built to detect threats before they go mainstream. By combining behavioral detections with insights from our own malware research, we're able to protect customers from exploitation even before public disclosures or patches become available.

Threat Intelligence
Featured image: Feature engineering for a macOS malware classifier, and why the Mac makes it harder than Windows
Calvin So • 13 min read

Feature engineering for a macOS malware classifier, and why the Mac makes it harder than Windows

The threat landscape for macOS malware is expanding, while the number of specialists dedicated to defending against it has not kept pace. Unlike Windows, where machine learning (ML) models are supported by extensive documentation and standardized datasets, the macOS environment presents a significant knowledge gap. At Iru, we captured SSTAR Agent, a crypto drainer targeting web3 technology developers via a fake interview lure, which we documented in an earlier post using an ML triage we built.

Threat Intelligence
Featured image: How-to guide: Changing and resetting Mac passwords
Arek Dreyer • 8 min read

How-to guide: Changing and resetting Mac passwords

This post was originally published in May 2023 and has been updated in July 2026 to reflect the latest information. When was the last time you or someone in your organization needed their Mac password to be something different than what it previously was? There are two ways to do that: change or reset. But although those two words might seem similar, their difference is significant.

Educational

See Iru in action

Discover why thousands of teams choose Iru

By submitting this form I agree to Iru’s Privacy Policy and consent to be contacted by Iru about its products and services.

Stay up to date

Iru's bi-weekly collection of articles, videos, and research to keep IT & Security teams ahead of the curve.