{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-guides/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"Microsoft Intune Endpoint Management Configuration Guide","siteUrl":"https://docs.synqly.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This guide walks you through creating an Azure AD application with Intune"," ","permissions, then configuring a Microsoft Intune Endpoint Management"," ","integration in Synqly."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"prerequisites","__idx":0},"children":["Prerequisites"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["An Azure AD tenant with Microsoft Intune licenses."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Administrator access to register applications in Azure AD."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-1-create-an-azure-ad-application","__idx":1},"children":["Step 1: Create an Azure AD Application"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Log in to the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://portal.azure.com"},"children":["Azure portal"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Azure Active Directory"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["App registrations"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["New registration"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Enter an application name (e.g., \"Synqly Intune Integration\")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Under ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Supported account types"]},", select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Accounts in this organizational directory only"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Register"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["On the application overview page, note the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Application (client) ID"]}," and the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Directory (tenant) ID"]},". You will need both values when configuring the integration."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-2-create-a-client-secret","__idx":2},"children":["Step 2: Create a Client Secret"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["In the application you just registered, navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Certificates & secrets"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["New client secret"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Enter a description and select an expiration period."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Copy the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Value"]}," of the new secret immediately — it is shown only once. Store it securely."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-3-grant-api-permissions","__idx":3},"children":["Step 3: Grant API Permissions"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["API permissions"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add a permission"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Microsoft Graph"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Application permissions"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Add the following permissions:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["DeviceManagementManagedDevices.Read.All"]}," — required for querying devices."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["DeviceManagementConfiguration.Read.All"]}," — required for querying compliance policies."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["DeviceManagementManagedDevices.PrivilegedOperations.All"]}," — required only if you need remediation actions (wipe, retire, remote lock, etc.)."]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Grant admin consent for [your tenant]"]}," and confirm."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more details, see the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"https://learn.microsoft.com/en-us/graph/permissions-reference"},"children":["Microsoft Graph permissions reference"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-4-configure-the-integration-in-synqly","__idx":4},"children":["Step 4: Configure the Integration in Synqly"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Credential"]}," — Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["OAuth Client"]}," and enter:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Client ID"]},": The Application (client) ID from Step 1."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Client Secret"]},": The secret value from Step 2."]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Tenant ID"]}," — The Directory (tenant) ID from Step 1."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Base URL"]}," — Leave blank for global commercial tenants. For national cloud deployments, enter the Microsoft Graph API URL for your environment (e.g., ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://graph.microsoft.us"]}," for US Government GCC High, or ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://microsoftgraph.chinacloudapi.cn"]}," for China)."]}]}]},"headings":[{"value":"Prerequisites","id":"prerequisites","depth":2},{"value":"Step 1: Create an Azure AD Application","id":"step-1-create-an-azure-ad-application","depth":2},{"value":"Step 2: Create a Client Secret","id":"step-2-create-a-client-secret","depth":2},{"value":"Step 3: Grant API Permissions","id":"step-3-grant-api-permissions","depth":2},{"value":"Step 4: Configure the Integration in Synqly","id":"step-4-configure-the-integration-in-synqly","depth":2}],"frontmatter":{"slug":"guides/provider-configuration/intune-endpointmgmt-setup","seo":{"title":"Microsoft Intune Endpoint Management Configuration Guide"}},"lastModified":"2026-05-07T14:43:08.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/provider-configuration/intune-endpointmgmt-setup","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}