Preparations

In the Microsoft Azure portal, and in the main menu, select Azure Active Directory, and then select App registrations.

Select New registration.

In the Name box, enter Microsoft Intune SIM app.

Set Supported account types to Accounts in this organizational directory only.

Select Register to save the new application.

In the Microsoft Azure portal, and in the main menu, select Azure Active Directory, and then select App registrations.

Select All apps.

Select Microsoft Intune SIM app.

Select API Permissions.

In the API Permissions view, select Add a permission.

In the Request API permissions section, select Microsoft Graph.

Select Application permissions.

Configure the following list of permissions:

1. Select DeviceManagementApps > DeviceManagementApps.Read.All (Read Microsoft Intune apps)

2. Select DeviceManagementManagedDevices > DeviceManagementManagedDevices.Read.All (Read Microsoft Intune devices)

3. Select User > User.Read.All (permission to read all users' full profiles)

   This needs to be selected only if LogonName is selected in the Username Mode dropdown when configuring the connector.

Select Delegated permissions and clear the User > User.Read permission, if it is selected.

Select Add permissions.

Select Grant admin consent for your company name.

In the Microsoft Azure portal, navigate to Microsoft Intune SIM app.

Make a note of the value in the Directory (tenant) ID field. 

The value will be used as the Directory id when configuring the integration connector.

In the Microsoft Azure portal, navigate to Microsoft Intune SIM app.

Make a note of the value of the Application (client) ID.

The value will be used as the Application id when configuring the integration connector.

In the Microsoft Azure portal, navigate to Microsoft Intune SIM app.

Select Certificates & secrets.

Create a new client secret using of the following information:

1. Select New client secret.

2. Set Description to sim_intune_key.

3. Set Expires to 24 months.

   Important

   The new client secret needs to be regenerated after the set expiration time. This also means that the connector needs to be re-configured.

Select Add.

The client secret is shown.

Make a note of the value of the client secret. The value is used as the Application secret when configuring the integration connector.