Microsoft Intune connector

This is a cloud connector.

The Microsoft Intune connector gathers data about devices from Microsoft Intune for use in Ivanti Neurons. This connector can be used without Ivanti patch products.

In order to connect Microsoft Intune to the Neurons Platform, you must create an application in Entra ID first (formerly Azure AD). The app must have permissions to read and write Microsoft apps (DeviceManagementApps.Read.All, DeviceManagementManagedDevices.Read.All, Users.Read.All, and Device.ReadWrite.All). To use scope tag filters in Neurons, the app also needs the DeviceManagementRBAC.Read.All permission.

For information on creating the app, see this article in the Community: How to set up an Azure Active Directory (AD) or Azure Intune Connector

For information about what data is imported and how it is mapped, see Mapping (below).

Options

A Microsoft Intune connector has the following options:

  • Connector name: A name for the connector.
  • Connector server name: For cloud connectors, this server is the Cloud option on the Connector Servers page. If you already added the connector to the Cloud option, this field will be populated for you. Otherwise, select Cloud from the list.
  • Directory (tenant) ID: The ID of the tenant you created in Entra ID.
  • Application (client) ID: The ID of the application you created in Entra ID.
  • Client secret: The client secret associated with the application you created in Entra ID.
  • Device threshold: To limit the amount of data that is gathered for Neurons, set a threshold for a specific number of days. The connector will not include records unless the device has checked in or otherwise changed during that time.

  • Scope tag: Enter a scope tag filter to import specific devices. Scope tags are created and maintained within Microsoft Intune. You will need the DeviceManagementRBAC.Read.All permission within your Entra ID app to use this filter in Neurons.

  • Repeats: How often the connector should gather data.
  • Start time: The time of day the connector should start running. To minimize the impact on your network and applications, we recommend that connectors generally run at night or on weekends.
  • Active: Whether the connector is active or not. While the connector is active, it runs according to the schedule you create. If you clear the check box, the connector is inactive and will not gather data until the check box is enabled again and the connector is saved.

For details on configuring or using connectors, see Setting up connectors.

Mapping

The data that this connector imports is mapped to target attributes in the Neurons Platform database.

The following fields must all exist in order for the device to be imported:

  • Intune ID
  • Physical address
  • Serial number
  • Entra ID

Additional device data that is imported:

  • Device user's display name, email address, and Azure ID
  • Last logon
  • Last sync
  • Device type, name and compliance state
  • If the device has been rooted or jailbroken
  • If the device is supervised
  • BitLocker information
  • OS and OS version
  • Manufacturer and model
  • ICCID, MEID, and IMEI
  • Total storage and available storage
  • Carrier network
  • Phone number
  • Software information

For an overview of how the data imported by this connector is mapped to the Neurons target attributes, please download the CSV file using the button below.

Download mappings (less than 10 kB)

For an overview of the Neurons target attributes per data type and the connector source attributes that are mapped to them, see Connector data mapping.