Microsoft Intune

📘

Add Microsoft Intune capabilities to your app to support Mobile Device Management (MDM) and Mobile Application Management (MAM) using the Microsoft Endpoint Manager.

Overview

Median’s Microsoft Intune module integrates the Intune Mobile SDK into your iOS and Android apps. Learn more about the Intune App SDK here: https://docs.microsoft.com/en-us/mem/intune/developer/app-sdk

Requirements

  • Microsoft Intune account
  • Client ID
  • Tenant ID
  • Client secret

Step 1: Create a client ID and a tenant ID

  1. Log in to https://portal.azure.com.
  2. Under Azure services, click Azure Active Directory.
  3. In the left navigation, click App registrations.
  4. On the main screen, click New registration.
  5. In the Register an application screen, enter your app’s name.
    Keep the option Accounts in this organizational directory only selected.
  6. Click Register.
    Your application is created. The client ID and tenant ID are displayed.
  7. Copy the values next to Application (client) ID and the Directory (tenant ID).

Step 2: Create a client secret

  1. In the left navigation, click Certificates & secrets.
  2. In the main screen, under Client secrets, click New client secret.
  3. In the Add a client secret popup, do the following:
    a. Enter a description for the client secret, for example, Client secret for .
    b. Under Expires, select Never.
    c. Click Add.
  4. The new client secret is added under Client secrets.
  5. Copy the value of your new client secret.

Step 3: Add permissions to your app in Microsoft Azure

  1. In the left navigation, click API permissions.

  2. In the main screen, under Configured permissions, click Add a permission.

  3. In the Request API permissions popup, do the following:
    a. Click Microsoft Graph.
    b. Click Application permissions.
    c. Under Select permissions, select the following:
    NOTE—You can easily find these permissions by entering them in the search bar.

    • Device.Read.All.
    • Group.Read.All
    • DeviceManagementManagedDevices.ReadWrite.All

    d. Click Add permissions.
    The permissions are saved for the app you registered above in step 1.

  4. In the main screen, under Configured permissions, click Grant admin consent for <your app name>.

  5. Click Yes when prompted to confirm your request.
    The Status column of the Configured permissions table shows Granted for <your app name>.