Microsoft Intune Spoke

  • Release version: Zurich
  • Updated January 12, 2026
  • 3 minutes to read
  • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Microsoft Intune Spoke

    The Microsoft Intune spoke enables ServiceNow customers to manage devices and applications within their Microsoft Intune accounts directly from their ServiceNow instance. It facilitates automation of device and application management tasks by integrating with Microsoft Intune APIs, streamlining workflows for IT teams.

    Show full answer Show less

    This spoke requires an Integration Hub subscription and depends on several plugins, including the Microsoft Entra ID Spoke and IntegrationHub components. The latest version is 1.4.2, designed primarily for Microsoft Intune API version v1, with possible compatibility for newer versions.

    Note: Android application deployment is not supported, and the Client Software Distribution 2.0 application must be installed to fully utilize certain subflows and actions.

    Key Features

    • Subflows: Sample subflows demonstrate automation scenarios such as creating software configurations, configuring groups in Intune, deploying applications, discovering and storing data, looking up application and group details, and revoking applications from users or devices.
    • Actions: A comprehensive set of actions supports application management (retrieving application and assignment details), device management (retrieving, updating, deleting, syncing managed devices), metadata retrieval, and data management tasks.
    • Modules and Tables: The spoke adds dedicated modules to your ServiceNow instance to display and manage Applications, Groups, Configurations, Deployments, and Server Instances, backed by specific tables for structured data management.
    • Connection Management: Integration Hub’s use of connection and credential aliases simplifies managing credentials and OAuth tokens across environments, reducing administrative overhead when configurations change.

    Practical Benefits

    • Enables centralized device and application lifecycle management within ServiceNow, improving operational efficiency.
    • Automates routine tasks such as deployment, configuration, and data synchronization with Microsoft Intune, reducing manual effort and errors.
    • Supports integration with existing ServiceNow IT workflows through subflows and actions, customizable to organizational needs.
    • Provides visibility into Intune-managed applications, groups, and devices via dedicated modules for better asset management and reporting.

    Prerequisites and Important Notes

    • Integration Hub subscription is mandatory to use this spoke.
    • Dependent plugins must be installed, some of which may require separate licensing.
    • The Client Software Distribution 2.0 application is required for using many subflows and actions effectively.
    • Android application deployment is not supported with this spoke.

    Manage devices and applications in the Microsoft Intune account from your ServiceNow instance.

    Request apps on the Store

    Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

    Integration Hub subscription

    This spoke requires an Integration Hub subscription. For more information, see Legal schedules - IntegrationHub overview.

    Spoke version

    The Microsoft Intune spoke v1.4.2 is the latest version.
    Note:
    Deployment of applications on Android devices isn’t supported.

    Supported versions

    This spoke was built for the Microsoft Intune Application programming Interface (API) version v1, but may be compatible with the later versions.

    Spoke dependencies

    If you’re having trouble installing the app, ensure that these dependent plugins are installed:
    Note:
    Some of these plugins are licensable features and require appropriate licenses, if used outside the spoke implementation. For more information on licenses, contact your account manager.

    Spoke subflows

    The Microsoft Intune spoke provides sample subflows to demonstrate automating tasks. To customize a sample subflow, copy it to required application scope. Available sample subflows include:

    Subflow Description
    Create Software Configuration Enables a CSD agent to create the software configuration record of the specified Microsoft Intune application.
    Configure Group Enables a CSD agent to create and configure the Microsoft Intune group in Intune Admin Portal.
    Deploy Application Adds the provided user or device to a group in the Microsoft Intune server.
    Discover and Store Data Discovers the data from the Microsoft Intune server and updates the records in the Application [sn_ms_intune_spoke_application], Group [sn_ms_intune_spoke_group], and Deployment [sn_ms_intune_spoke_deployment] tables.
    Look up Application Details Retrieves the additional deployment details for applications and updates the respective records in the deployment table.
    Look up Configuration Data Retrieves configuration data for the specified requested item or software configuration record.
    Look up Groups Returns the list of install groups or uninstall groups associated with given application id.
    Revoke Application Removes the provided user or device from the given group in the Microsoft Intune server.
    Important:
    To use these subflows, install the Client Software Distribution 2.0 application.

    Spoke actions

    The Microsoft Intune spoke provides actions to automate tasks when events occur in your ServiceNow instance. Available actions include:

    Category Action Description
    Application Management Get Managed Application Retrieves the details of an application.
    Look up Application Assignments Retrieves the application assignment data from the Microsoft Intune server.
    Look up Managed Applications Retrieves a list of all the applications.
    Device Management Delete Managed Device Deletes a managed device.
    Get Managed Device Retrieves the details of a managed device.
    Look up Managed Devices

    Retrieves the details of a managed device.

    Look up Managed Devices By Application

    Retrieves the details of a managed device within an application.

    Sync Managed Device Forces a managed device to check in with Microsoft Intune to retrieve and apply any pending actions, policies, and configuration updates.
    Look up Managed Devices By User

    Retrieves the details of a managed device for a user.

    Update Managed Device

    Updates the details of a managed device.

    Metadata Retrieval Look up Application ID Returns the Application ID for the dynamic input of the Lookup Managed Devices By Application action.
    Data Management
    Important:
    To use these actions, install the Client Software Distribution 2.0 application.
    Look up Configuration Data Retrieves the configuration data from a requested item or software configuration.
    Prepare Software Data Prepares the software data for the specified requested item that can be used for deployment or revocation.

    Spoke module

    The Microsoft Intune spoke adds the Microsoft Intune application to your instance and includes these modules:
    Module Description Table
    Applications Displays the list of applications from the Microsoft Intune server. Application [sn_ms_intune_spoke_application]
    Groups Displays the list of groups from the Microsoft Intune server. Group [sn_ms_intune_spoke_group]
    Configurations Stores software configuration details for the applications. Configuration [sn_ms_intune_spoke_sf_config]
    Deployments Displays the list of deployments on the Microsoft Intune server. Deployment [sn_ms_intune_spoke_deployment]
    Server Instances Stores details of the provider servers. Server Instance [sn_ms_intune_spoke_server]
    Important:
    To use these modules and tables, install the Client Software Distribution 2.0 application.

    Connection and credential alias requirements

    Integration Hub uses aliases to manage connection and credential information, and OAuth credentials. Using an alias eliminates the need to configure multiple credentials and connection information profiles when using multiple environments. If the connection or credential information changes, you don't need to update any actions that use the connection.

    For information about setting up the spoke, see Set up the Microsoft Intune spoke.