MS Intune integration

[Shawn Horley]

Greetings

We have switched from SCCM to MS Intune as our endpoint management system. I now need to integrate Intune with our ServiceNow instance. At this point I am not finding any direct integration products between ServiceNow and Intune. I have searched the articles and have seen the references to Mobichord. I am not convinced that it will be able to bring our computers into the CMDB and Asset Management tables. 

Can anyone advise what solution they managed to get assets managed by Intune to populate into, and update within ServiceNow?

Cheers

A.

[Jace Benson]

I'm actually in the works of moving this to using the microsoft graph api calls, however, it's permissions are being difficult.

[Sunniva]

Have you read this article? 

https://community.servicenow.com/community?id=community_article&sys_id=ee7ecccedb4304106064eeb5ca961...

[Shawn Horley]

Greetings @Sunniva 

Apologies for my tardy response. I have been away from the community for a bit.

Unfortunately I cannot advise you on this as we have delayed our Intune integration until we get our CMDB cleaned up. We have too many CI's, many of them duplicates to be willing to add more confusion with another integration further muddying the waters.

If you do manage to get your own integration working please feel free to share the results with us as there are a number of us I believe that are seeking a workable solution.

Cheers

A.

[Sunniva]

Hi! No worries.

Yes, we were able to set up the integration. I discovered that a colleague of mine had done this before, and he posted an article on this integration some weeks ago. This article explains the set up:

https://community.servicenow.com/community?id=community_article&sys_id=ee7ecccedb4304106064eeb5ca961...

Microsoft docs is not up to date. Docs states how many API permissions are not application supported, however we have found that to not be the case. As Alexander states, calling the "Managed Devices" API is possible even though docs states otherwise. Likewise, it is possible to call the "Managed Apps" API. 

Read permission for devices: https://docs.microsoft.com/en-us/graph/api/intune-devices-manageddevice-list?view=graph-rest-1.0

Read permission for apps: https://docs.microsoft.com/en-us/graph/api/intune-apps-managedapp-list?view=graph-rest-1.0

Here you can see how devices and application permissions apparently aren't supported. This is wrong - luckily it is! 

After you request the token, you import the Intune data to a staging table and create a transform map to map the data to the correct CMDB class and fields.

I found this blog post quite helpful as well: https://www.jds.net.au/understanding-outbound-web-services-in-servicenow/

- Sunniva

[manita_anand]

Hi Sunniva,

Can you tell me approx how much time did it take to do this integration?

Thanks!