---
sourceDocument: Yokohama Data and Automation
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/integrate-applications

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama Data and Automation

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# Set up the Microsoft Intune spoke

# Set up the Microsoft Intune spoke {#ariaid-title1}

Release version: Yokohama  
Updated January 30, 2025  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read  
Integrate your ServiceNow instance with the Microsoft Intune account by creating a custom OAuth application in Microsoft Intune.

## Before you begin

* Request an Integration Hub subscription.
* Activate the Microsoft Intune plugin.
* Role required: admin.
{#setup-ms-intune__ul_agy_qxd_rlb}

## Register OAuth application using the Microsoft Azure portal {#ariaid-title2}

Provide authorization to the ServiceNow instance by registering an application on Microsoft Entra ID.

### Before you begin

Role required: Azure Active Directory admin

### About this task

Complete these steps from the Microsoft Azure portal.

### Procedure

1. Log in to the Microsoft Azure portal.  
   For instructions on registering an application, see [Tutorial: Register an app with Azure Active Directory](https://docs.microsoft.com/en-us/powerapps/developer/common-data-service/walkthrough-register-app-azure-active-directory) in the [Microsoft Azure documentation](https://docs.microsoft.com/en-gb/).
2. In the Azure portal, add the Redirect URIs.  
   The Redirect URI should be in the format <kbd class="ph userinput">https://&lt;instance-name&gt;.service-now.com/oauth_redirect.do</kbd>. For more information, see [Authentication and authorization for Azure Time Series Insights API](https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-authentication-and-authorization).
3. For the Required Permissions, ensure that you provide these permissions:  
   Depending on your requirement, the permissions can be of the type, Application, or Delegated. For more information, see [Quickstart: Configure a client application to access a web API](https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-access-web-apis) in [Microsoft Docs](https://docs.microsoft.com/en-us/).
4. In the Azure portal, create a client secret.  
   For more information, see [Option 2: Create a new application secret](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal).
5. Copy the client secret for later reference.
{#reg-app-ms-intune__steps_zc2_jwv_cjb}

### Result

The ServiceNow application is created with Microsoft Azure AD.

## Register Microsoft Intune as an
OAuth provider {#ariaid-title3}

Use the information generated during the application configuration in Microsoft Azure portal to register Microsoft Intune as the OAuth
provider so that the ServiceNow instance can request OAuth 2.0
tokens.

### Before you begin

Role required: admin

### Procedure

1. Navigate to AllSystem OAuthApplication Registry.
2. Open for the record, Microsoft Intune.
3. On the form, fill these values.  
   {#reg-oauth-ms-intune__table_hpt_1wg_2hb__entry__2}

   | Field | Description |
   |-|-|
   | Client ID | Application ID created during application registration. |
   | Client Secret | Client secret created during application registration. |
   | Active | Option to actively use the application registry. |
   | Authorization URL | OAuth authorization code endpoint. Enter <kbd class="ph userinput">https://login.microsoftonline.com/&lt;Directory-ID&gt;/oauth2/v2.0/authorize</kbd>. |
   | Token URL | OAuth server token endpoint. Enter <kbd class="ph userinput">https://login.microsoftonline.com/&lt;Directory-ID&gt;/oauth2/v2.0/token</kbd>. |
   | Token Revocation URL | OAuth server token revocation endpoint. |
   | Redirect URL | OAuth callback endpoint. Enter <kbd class="ph userinput">https://&lt;instance-name&gt;.service-now.com/oauth_redirect.do</kbd>. |
   [Table 1. Application Registries form]

   {#reg-oauth-ms-intune__table_hpt_1wg_2hb}
4. Right-click the form header, and click Save.
{#reg-oauth-ms-intune__steps_atf_rss_fnb}

## Create a credential record for the Microsoft Intune spoke {#ariaid-title4}

Authorize the Microsoft Intune spoke actions by creating credential records for the application registered in the Microsoft Azure portal. The Microsoft Intune connection and
credential alias uses these credentials to authorize actions.

### Before you begin

Role required: admin.

### Procedure

1. Navigate to AllConnections \& CredentialsCredentials.
2. Click New.  
   The system displays this message: What type of Credentials would you like to create?
3. Select OAuth 2.0 Credentials.
4. On the form, fill in the fields.  
   {#cred-ms-intune__table_wng_1yg_2hb__entry__2}

   | Field | Description |
   |-|-|
   | Name | Name to uniquely identify the record. For example, <kbd class="ph userinput">MS Intune Cred</kbd>. |
   | Active | Option to actively use the credential record. |
   | OAuth Entity Profile | OAuth profile created during the registration of Microsoft Intune as an OAuth provider. For example, <kbd class="ph userinput">Microsoft Intune default_profile</kbd>. |
   [Table 2. OAuth 2.0 Credentials form]

   {#cred-ms-intune__table_wng_1yg_2hb}
5. Right-click the form header and click Submit.
6. To generate the OAuth token, click the Get OAuth Token related link.
{#cred-ms-intune__steps_izn_vts_fnb}

## Create a connection record for the Microsoft Intune spoke {#ariaid-title5}

Perform actions in Microsoft Intune by creating
connection records for your Microsoft Intune account. The Microsoft Intune connection and
credential alias uses these connections to perform actions.

### Before you begin

Role required: admin.

### Procedure

1. Navigate to AllConnections \& CredentialsConnections \& Credentials Aliases.
2. Open the alias record, Microsoft_Intune.
3. From the Connections tab, click New.
4. On the form, fill in the fields.  
   {#conn-ms-intune__table_c4p_lzg_2hb__entry__2}

   | Field | Description |
   |-|-|
   | Name | Name to uniquely identify the record. For example, <kbd class="ph userinput">MS Intune Connection</kbd>. |
   | Credential | Credential record created for Microsoft Intune spoke. For example, <kbd class="ph userinput">MS Intune Cred</kbd>. |
   | Connection alias | Alias record associated with this connection. |
   | URL builder | Note: Do not select the check box. |
   | Connection URL | Connection URL. Enter <kbd class="ph userinput">https://graph.microsoft.com</kbd>. |
   | Active | Option to actively use the connection. |
   | Domain | Domain that the action or activity runs in. |
   [Table 3. HTTP(s) Connection form]

   {#conn-ms-intune__table_c4p_lzg_2hb}
5. In the Attributes tab, specify <kbd class="ph userinput">v1.0</kbd> for u_version.
6. Click Submit.
{#conn-ms-intune__steps_gvq_g5s_fnb}

### Result

The Microsoft Intune spoke is set up and Microsoft Intune is integrated with the ServiceNow instance.

*[\>]: and then