How to retrieve bit locker id from intune to servicenow

[Dharsaan-K]

How to retrieve bit locker id from intune to servicenow using graph connection or any other options.

[Maham Tahir · Accepted solution]

Hi @Dharsaan-K, 

If you're talking about Microsoft Intune then you should use the Microsoft Graph API via custom IntegrationHub REST action or the SGC for Microsoft Intune. While the standard Service Graph Connector focuses on CMDB device inventory, BitLocker data is typically handled through specific Graph endpoints such as GET /informationProtection/bitlocker/recoveryKeys. 

To access the actual recovery key, you must include the $select=key parameter in your request and ensure your Azure App Registration has the BitlockerKey.Read.All or BitlockerKey.ReadBasic.All application permissions. For security and auditing, ServiceNow can then store these IDs in a secured table or display them on-demand via a UI Action to helpdesk agents.

Here's the official Microsoft link on Get bitlockerRecoveryKey - Microsoft Graph v1.0 | Microsoft Learn.

If you find my response helpful, mark it as helpful and accepted solution.

Regards, 

Maham Tahir.

[Dharsaan-K]

Is there any similar way to pull 'Activation lock bypass code' from intune.

[Maham Tahir]

No, I'm not aware of that.

[Dharsaan-K]

I got it we need to access get https://graph.microsoft.com/v1.0/deviceManagement/managedDevices/%7BmanagedDeviceId%7D?$select=activ... 

Thanks for your assistance.