Skip to main content

Setup

Azure App Registration

Azure App registrations are a prerequisite for accessing the Microsoft Graph AP and for authorization and athentication.

The following describes how to create an Azure app registration.

Two values are required to configure the authentication:

  • Application ID
  • Tenant ID

Three values are required to connect to Intune:

  • Application ID
  • Tenant ID
  • Client Secret

app-registration-14a.png

The following steps describe how to perform the app registration and generate the client secret:

Perform App Registration in Azure

Further information

  1. The first step is to register a new app.

    app-registration-1.png

  2. For this purpose, a name must be assigned, for example Intune Manager Auth or Intune Manager and the creation confirmed with OK.

    app-registration-2a.png

Create Client Secret

Further information

A client secret is sensitive security information.

The client secret is only visible in plain text when it is created. Therefore, a copy should be created for further configuration.

  1. To create a client secret, select Add Certificate or secret in the app registration within the overview under the item Client Credentials.

    app-registration-10a.png
  2. In the Client secret tab, a new client secret can be generated at any time.

    app-registration-11.png
  3. A validity period must be specified during creation and a description can be added.


    If several different instances/installations are used to access the Microsoft Graph API, it is recommended to use a separate client secret for each instance/installation.
    app-registration-12.png
  4. The client secret is only visible in plain text when it is created. Therefore, a copy should be created for further configuration.

    app-registration-13a.png

Procedure of the setup 

The manual installation is largely self-explanatory. After starting Setup.exe, the following sequence results:

setup1.png

setup2.png

setup3.png

setup4.png

The setup automatically authorizes the local computer account as db_owner for the database.

setup5.png

setup6.png

setup7.png

setup8.png