Prerequisites for connecting to Microsoft Intune

This section describes prerequisite procedures you need to perform before you can start connecting to Microsoft Intune.

To connect to Microsoft Intune, you need:

• A Microsoft Intune account
• A client ID
• A tenant ID
• A client secret

Step 1: Create a client ID and a tenant ID

1. Sign in to https://portal.azure.com.

2. Under Azure services, click Azure Active Directory.

3. In the left navigation, click App registrations.

4. On the main screen, click New registration.

5. In the Register an application screen, enter a user-facing display name for the app, for example, Knox E-FOTA. Keep the option Accounts in this organizational directory only selected.

6. Click Register. The Knox E-FOTA application is created. The client ID and tenant ID are displayed.

7. Copy the values next to Application (client) ID and the Directory (tenant ID).

Step 2: Create a client secret

1. In the left navigation, click Certificates & secrets.

2. In the main screen, under Client secrets, click New client secret.

3. In the Add a client secret popup, do the following:

   1. Enter a description for the client secret, for example, Client secret for Knox E-FOTA.

   2. Under Expires, select Never.

   3. Click Add. The new client secret is added under Client secrets.

4. Copy the value of your new client secret.

Step 3: Add permissions to your Knox E-FOTA app in Microsoft Azure

1. In the left navigation, click API permissions.

2. In the main screen, under Configured permissions, click Add a permission.

3. In the Request API permissions popup, do the following:

   1. Click Microsoft Graph.

   2. Click Application permissions.

   3. Under Select permissions, select the following:

      You can easily find these permissions by entering them in the search bar.

      • Device.Read.All
      • Group.Read.All or GroupMember.Read.All
      • DeviceManagementManagedDevices.Read.All

   4. Click Add permissions. The permissions are saved for the app you registered in step 1.

4. In the main screen, under Configured permissions, click Grant admin consent for.

5. Click Yes when prompted to confirm your request. The Status column of the Configured permissions table shows Granted for.