Intune Integration with Servicenow

[Bharath Kumar A]

Intune Integration with ServiceNow

Part 1: Microsoft Azure application registration configuration

Microsoft Intune is a cloud-based endpoint management solution. It manages user access and simplifies app and device management across your devices, including mobile devices, desktop computers, and virtual endpoints.

Intune Integration with ServiceNow provides sync between Intune device data and ServiceNow CMDB CI data.

Step 1: Sign in to Azure portal (portal.azure.com)

Step 2: Click on Azure Active Directory and select App Registration

Note: If you are unable to find this application on home page, use the global search by typing “App registrations”.

Step 3: Create a new registration to communicate with Intune devices and users.

Step 4. Provide a suitable name for application and select multi-tenant azure account support then click on Register.

Step 5: Generate client certificate secret key by clicking on Certifications and Secrets in the left panel.

Step 6: Click on New client secret to generate new key.

Step 7: Give a proper name for key and select expiration date.

Step 8: Store the secret key value as it will not be available later.

Step 9: Click on Overview on the left panel, collect the Application (Client) ID and Directory (Tenant) ID.

Step 10: Click on API Permissions on left panel and click on configure menu and remove existing default permissions on application.

Step 11: Add below permissions to application to read devices and users from Intune App.

• DeviceManagementManagedDevices.Read.All
• Directory.ReadWrite.All
• Reports.Read.All
• User.Read.All

For adding the permissions, please follow the steps below,

I.  Click on Add a permission and select Microsoft Graph.

II. Select Application permissions and search for the permissions from search bar and check the select box.

 Note: Repeat this step to add all above permissions

III. Similarly do the same for all the permissions under Delegated permissions.

IV. Verify all the following permission added and Click on Grant admin consent for MSFT

That's the end of part 1.  Don't forget to collect Client ID, Tenant ID and Secret value.

In the Part 2 i will discuss how to write a scripted data source to collect data to from Intune to ServiceNow Import set table using OAuth security. Then create a new IntegrationHub ETL record to map value to required CMDB Tables.

[sai laxmi]

Helpful article

[pratiksha5]

Informative. 

[Rekha N]

Thank you for the information Bharath 👍 

[Ali543]

Integrating Microsoft Intune with ServiceNow allows you to automate and streamline various IT processes and workflows related to device management, asset management, incident management, and more. Here's an overview of how you can integrate Intune with ServiceNow:

1. Set up a ServiceNow developer account: If you don't have a ServiceNow instance, sign up for a developer of sun tv serial account on the ServiceNow Developer Portal.

2. Install the Intune Integration app from the ServiceNow Store: Visit the ServiceNow Store and search for the "Intune Integration" app about https://pk2-win.com/. Install the app in your ServiceNow instance.

3. Configure Intune API access: In the Azure portal, create an Azure Active Directory (AD) application and grant it the necessary permissions to access Intune APIs. Take note of the Application (client) ID and Tenant (directory) ID, as you will need them for the integration.

4. Set up OAuth credentials in ServiceNow: In ServiceNow, configure the OAuth credentials for Intune Integration. Provide the Application ID, Tenant ID, and other required information.

[rakesh1809]

Hi Bharath, Really helpful post could also share the part 2 on how to pull the user/personal devices from Intune to Servicenow.

Thanks,
Rakesh