Intune Integration with ServiceNow
Part 1: Microsoft Azure application registration configuration
Microsoft Intune is a cloud-based endpoint management solution. It manages user access and simplifies app and device management across your devices, including mobile devices, desktop computers, and virtual endpoints.
Intune Integration with ServiceNow provides sync between Intune device data and ServiceNow CMDB CI data.
Step 1: Sign in to Azure portal (portal.azure.com)
Step 2: Click on Azure Active Directory and select App Registration
Note: If you are unable to find this application on home page, use the global search by typing “App registrations”.
Step 3: Create a new registration to communicate with Intune devices and users.
Step 4. Provide a suitable name for application and select multi-tenant azure account support then click on Register.
Step 5: Generate client certificate secret key by clicking on Certifications and Secrets in the left panel.
Step 6: Click on New client secret to generate new key.
Step 7: Give a proper name for key and select expiration date.
Step 8: Store the secret key value as it will not be available later.
Step 9: Click on Overview on the left panel, collect the Application (Client) ID and Directory (Tenant) ID.
Step 10: Click on API Permissions on left panel and click on configure menu and remove existing default permissions on application.
Step 11: Add below permissions to application to read devices and users from Intune App.
- DeviceManagementManagedDevices.Read.All
- Directory.ReadWrite.All
- Reports.Read.All
- User.Read.All
For adding the permissions, please follow the steps below,
I. Click on Add a permission and select Microsoft Graph.
II. Select Application permissions and search for the permissions from search bar and check the select box.
Note: Repeat this step to add all above permissions
III. Similarly do the same for all the permissions under Delegated permissions.
IV. Verify all the following permission added and Click on Grant admin consent for MSFT
That's the end of part 1. Don't forget to collect Client ID, Tenant ID and Secret value.
In the Part 2 i will discuss how to write a scripted data source to collect data to from Intune to ServiceNow Import set table using OAuth security. Then create a new IntegrationHub ETL record to map value to required CMDB Tables.
