Prerequisites for connecting to Microsoft Intune

This section describes prerequisite procedures you need to perform before you can sync device groups from Microsoft Intune to the Knox E-FOTA console.

To connect to Microsoft Intune, you need:

• A Microsoft Intune account
• A client ID
• A tenant ID
• A client secret

Step 1: Create a client ID and a tenant ID

1. Sign in to https://portal.azure.com.

2. Click More services.

3. Under Identity, click App registrations.

4. On the main screen, click New registration.

5. Enter a name for this application, for example, Knox E-FOTA.

6. Set Supported account types to Single tenant only.

7. Click Register. The Knox E-FOTA application is created. The client ID and tenant ID are displayed.

8. Copy the values next to Application (client) ID and the Directory (tenant ID).

Step 2: Create a client secret

1. In the left navigation, click Certificates & secrets.

2. In the main screen, under Client secrets, click New client secret.

3. Under Add a client secret, do the following:

   1. Enter a description for the client secret, for example, Client secret for Knox E-FOTA.

   2. Under Expires, select 24 months.

   3. Click Add. The new client secret is added under Client secrets.

4. Copy the value of your new client secret.

Step 3: Add permissions to your Knox E-FOTA app in Microsoft Azure

1. In the left navigation, click API permissions.

2. In the main screen, under Configured permissions, click Add a permission.

3. Under Request API permissions, do the following:

   1. Click Microsoft Graph.

   2. Click Application permissions.

   3. Under Select permissions, select all of the following permissions:

      You can find these permissions by entering them in the search bar.

      • Device.Read.All
      • User.Read.All
      • Group.Read.All
      • GroupMember.Read.All
      • DeviceManagementManagedDevices.Read.All

   4. Click Update permissions. The permissions are saved for the app you registered in step 1.

4. In the main screen, under Configured permissions, click Grant admin consent for.

5. Click Yes when prompted to confirm your request. The Status column of the Configured permissions table shows Granted for.