Skip to main content

Integration

Application registrations

The application registration is carried out at the Microsoft Azure portal via administrative credentials. A user can choose one of the following types of accounts:

  • A tenant admin account;
  • A tenant user account (with the enabled “Users can register applications” setting).

The option to open an application registration page is available under:

  • Microsoft Azure portal > Azure services > App registrations;

intune_01.png

  • Microsoft Azure portal > Search > Enter a search request (i.e., “App registrations”) > Select the service in the list > App registrations;

intune_02.png

  • Microsoft Azure portal > Menu > All services > Enter a search request (i.e., “App registrations”) > Select the service in the list > App registrations.

intune_03.png

Microsoft Azure portal shows the screen when successful:

intune_04_1.png

The option to create a new application registration is available under the New registration option.

intune_05.png

Microsoft Azure portal shows the Create window when successful:

intune_06.png

To create a new application registration, a user fills in the fields in the form (see Table 1 and the Microsoft Azure manual).

Table 1. A new application registration

Field name Details
Name This field sets a meaningful application name to display to users (i.e., Apptimized Intune Test)
Supported accounts

This option identifies types of accounts that can use the application.
Three options available:

  • Accounts in this organizational directory only;
  • Accounts in any organizational directory;
  • Accounts in any organizational directory and personal Microsoft accounts.
Redirect URI

This setting is optional, and the values can be provided later.

intune_07.png

When clicking on the Register button, Microsoft Azure portal shows the following screen:

intune_08.png

When the application successfully registered, a user needs to make a series of settings steps, namely:

  • To add a redirect URIs;
  • To add new client secret string;
  • To configure permissions to the application to call API.

Next, each setting block is shown in more detail.

The option to add redirect URIs to the application is available under the All services > App registrations > Select the application in the list > Manage menu > Authentication > Redirect URIs > Add URI > Fill in new URI > Save button.

intune_09.png

The option to add new client secret string is available under the All services > App registrations > Select the application in the list > Manage menu > Certificates & secrets > Client secrets > New client secret button > Fill in the description > Set the expiry mode > Add button.

intune_10.png

Note. When clicking on the Add button, the client secret value appears (i.e., ~_fd-Y49~haNZ~g8RbDz9yQCF4KQ__1j49). A user must copy the value to the clipboard to use it in the client’s application code. It becomes inaccessible once a user leaves this page. The Client secret value correlates with the Client secret field when integrating Intune into the Apptimized portal.

intune_11.png

The option to configure permissions to the application to call API is available under All services > App registrations > Select the application in the list > Manage menu > API permissions > Add a permission > Microsoft Graph.

intune_12.png

Microsoft Azure portal shows the following screen when successful:

intune_13.png

The option to set the types of permissions to the application is available under the Delegated permissions button > Select the permissions in the list > Add permissions button. The screenshot below shows the list of enabled permissions:

intune_14.pngintune_14.png

Some delegated permissions can be consented to by non-administrative users, but some higher-privileged permissions require administrator consent. The option to grant permissions is available under the Grant admin consent for [company name] button.

Assigning permissions to a user to work with Microsoft Intune from Microsoft Azure

The option to open an application registration page is available under:

  • Microsoft Azure portal > Azure services > Intune;

intune_15.png

  • Microsoft Azure portal > Search > Enter a search request (i.e., “Intune”) > Select the service in the list > Intune;

intune_16.png

  • Microsoft Azure portal > Menu > All services > Enter a search request (i.e., “Intune”) > Select the service in the list > Intune.

intune_17.png

Microsoft Azure portal shows the following screen when successful:

intune_18.png

The option to add new Intune role is available under the All services > Intune > Manage menu > Roles > All roles > Create button.

intune_19_1.png

Microsoft Azure portal shows the screen when successful:

intune_19_2.png

The screenshot below shows the procedure for creating a new custom role (Create button > Enter role name > Enter role description > Select scope tags > Create button):

intune_19.png

Microsoft Azure portal shows the following screen when successful:

intune_19_8.png

When the new custom role appears in the list, the assignments must be provided. Microsoft Azure portal shows the following screen when clicking the new custom role name:

intune_21_1.png

The option to provide assignments is available under the Manage menu > Assignments > Assign button.

The screenshot below shows the procedure for role assignments (Assign button > Enter role assignment name > Enter role assignment description > Select admin groups > Select scope groups > Select scope tags > Create button):

intune_20.png

Microsoft Azure portal shows the following screen when successful:

intune_20_7.png

Integration of the application from the Microsoft Azure portal into the Apptimized portal

The one-time configuration is available for project administrators under the Project menu > Administration > Settings > Integration section > Intune.

intune_22.png

Intune becomes active when switched on and once the required settings are completed. All required fields are marked with an asterisk *.

intune_23.png

Table 2. Basic settings

Settings

Details

Tenant Identifier

The Tenant Identifier corresponds to the term Directory (tenant) ID in the Microsoft Azure portal.

The Directory (tenant) ID is a unique identifier generated automatically by the Microsoft Azure portal for every application during its creation.

intune_25_1.png

Client Identifier

The Client Identifier corresponds to the term Application (client) ID in the Microsoft Azure portal.

The Application (client) ID is a unique identifier generated automatically by the Microsoft Azure portal for every application during its creation.

intune_25_2.png

Client Secret

The Client Secret corresponds to the term Application (client) ID in the Microsoft Azure portal.

The Client Secret is a unique identifier generated automatically by the Microsoft Azure portal for every application during its creation.

Learn more.

Apptimized shows the following notification when successful:

intune_24.png

Manage project roles

Intune requires the assignment of the project user to the role with the required permission. Assigning needed permissions is available under the Project menu > Administration > Roles.

 intune_26.png

It is possible to add permission to the existing group or to create a new one by clicking the Add new role button, as shown on the screenshots below.

intune_27.png

The new role requires its meaningful name and Intune project permission.

intune_28.png

Apptimized shows the following screen and notification when successful:

intune_29.png

For a user to be able to perform any activities related to the Intune, he must be assigned a role with the Intune project permission. The option to assign the role to a user (or a group) is available under the Update users or Update groups buttons respectively.

Instructions on how to edit or manage roles within the project are available in the Apptimized Portal user manual > Project role section.

 

 

Back to top