- *BASICS*
- The Knox Ecosystem
- Samsung Knox Portal
- Knox Cloud Services
- General Knox Support
- Knox Licenses
- *FOR IT ADMINS*
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- White paper
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Introduction
- Get started
- Features
- Register resellers
- Add an admin
- Create profiles
- Google device owner support
- MDM compatibility matrices
- Device users
- Activity log
- Enroll and unenroll devices
- Configure devices
- Provide KME feedback
- Use the Knox Deployment App (KDA)
- Recover Google FRP locked devices using KME
- Role-based access control (RBAC)
- Release notes
- FAQs
- Troubleshoot
- KBAs
- On-Premise
- Knox Configure
- Mobile
- Wearables
- Shared Device
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQs
- Troubleshoot
- Knox Manage
- Introduction
- How-to videos
- Get started
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- FAQs
- KBAs
- Knox E-FOTA
- Introduction
- White paper
- Knox E-FOTA One
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQs
- Troubleshoot
- KBAs
- Migrate from Knox E-FOTA Advanced to Knox E-FOTA One
- Knox E-FOTA Advanced
- Knox E-FOTA on MDM
- Samsung Care+ for Business
- *FOR RESELLERS*
- Knox Deployment Program
- *FOR MANAGED SERVICE PROVIDERS*
- Knox MSP Program
Prerequisites for connecting to Microsoft Intune
This section describes prerequisite procedures you need to perform before you can start connecting to Microsoft Intune.
To connect to Microsoft Intune, you need:
- A Microsoft Intune account
- A client ID
- A tenant ID
- A client secret
Step 1: Create a client ID and a tenant ID
-
Log in to https://portal.azure.com.
-
Under Azure services, click Azure Active Directory.
-
In the left navigation, click App registrations.
-
On the main screen, click New registration.
-
In the Register an application screen, enter a user-facing display name for the app, for example, Knox E-FOTA One.
Keep the option Accounts in this organizational directory only selected.
-
Click Register.
The Knox E-FOTA One application is created. The client ID and tenant ID are displayed.
-
Copy the values next to Application (client) ID and the Directory (tenant ID).
Step 2: Create a client secret
NOTE—This procedure is a continuation of Create a client ID and a tenant ID.
-
In the left navigation, click Certificates & secrets.
-
In the main screen, under Client secrets, click New client secret.
- In the Add a client secret popup, do the following:
Enter a description for the client secret, for example, Client secret for Knox E-FOTA One.
Under Expires, select Never.
Click Add.
The new client secret is added under Client secrets.
-
Copy the value of your new client secret.
Step 3: Add permissions to your Knox E-FOTA One app in Microsoft Azure
NOTE—This procedure is a continuation of Create a client secret.
-
In the left navigation, click API permissions.
-
In the main screen, under Configured permissions, click Add a permission.
- In the Request API permissions popup, do the following:
Click Microsoft Graph.
Click Application permissions.
- Under Select permissions, select the following:
NOTE—You can easily find these permissions by entering them in the search bar.
Device.Read.All.
Group.Read.All
DeviceManagementManagedDevices.Read.All
Click Add permissions.
The permissions are saved for the app you registered in step 1.
-
In the main screen, under Configured permissions, click Grant admin consent for <your company>.
-
Click Yes when prompted to confirm your request.
The Status column of the Configured permissions table shows Granted for <your company name>.