Microsoft Endpoint Manager - Single Tenant

Microsoft Endpoint Manager syncs your hardware assets via API to ScalePad

Use this guide to integrate ScalePad with Microsoft Endpoint Manager. A configured Azure application is required to grant ScalePad access to your device and software information in order to integrate Microsoft Endpoint Manager with ScalePad.

📘

Known limitation with indirect or unmanaged resellers

The Microsoft Endpoint Manager integration does not support indirect or unmanaged resellers because you need direct access to manage client devices. Indirect providers and Cloud Solution Provider (CSP) direct partners should have no issues, but this is something to be aware of if you purchase through a reseller.

Prerequisites

To use either Microsoft Endpoint Manager integration, users will need:

  • Work (or school) accounts from Microsoft. This includes organizations that use Office 365
  • An active Intune subscription
  • Administrator user credentials for Microsoft Azure and ScalePad or member permissions of Manage Sync Settings selected

In Microsoft Azure

Creating the application

  1. Sign in to Microsoft Azure as a global administrator
  2. From the Azure Directory admin center, navigate to Azure Active Directory > App registrations
  3. Click the +New Registration button
  4. Enter a user-facing display name for the new application registration
  5. After entering a name (for example, ScalePad MEM Integration), we recommend leaving the default settings unchanged.
  6. Click Register to create the application
  7. Under your newly created application, take note of the Application (client) ID and the Directory (tenant) ID.

🚧

When adding the Microsoft Endpoint Manager integration to ScalePad, you will need to add the Application (client) ID and Directory (tenant) ID to the Microsoft Endpoint Manager add integration page .


Adding API permissions

Users/admins are required to grant permissions to applications before they can call APIs. For full functionality, the following permissions are required:

  • DeviceManagementApps.Read.All
  • DeviceManagementManagedDevices.Read.All
  • Organization.Read.All
  1. Navigate to the API permissions section
  2. Click the Add a permission button
  3. In the Request API permissions screen, select Microsoft Graph and then select Application permissions
  4. In the Select permissions section, click the arrows next to DeviceManagementManagedDevices, DeviceManagementManagedApps, and Organization to expand each section or start typing the permission to filter the results.
    • In the DeviceManagementManagedApps module, select the
      DeviceManagementApps.Read.All.
    • In the DeviceManagementManagedDevices module, select the
      DeviceManagementManagedDevices.Read.All.
    • In the Organization module, select the Organization.Read.All.
  5. Click Add permissions

🚧

After adding permissions, you need to add administrator consent for each permission name.

  1. Click Grant admin consent

Configure application process

Client secrets, also known as application passwords, are secret strings that the application uses to prove its identity when it requests a token.

  1. Navigate to the Certificates & secrets section
  2. In the Client secrets section, click the New client secret button
  3. Add a description for the client secret. After entering a description, we recommend leaving the default expiry settings to 6 months.

📘

Why 6 months for expiry?

We follow Microsoft's recommendation of a 6-month expiration for client secrets as this period of time is a balance between securing the application's access and convenience of use for our partners. Expiry dates can range from 1 day to 2 years, but Microsoft client secrets must expire eventually. Before a client secret expires, a new one can be created and saved in the existing integration with no downtime.

  1. Click the Add button.
  2. Take note of the Client secret Value, as this value is required when adding the integration to ScalePad.

🚧

Keep it private

Keep the Client secret Value in a secure location, because this value is not recoverable once navigating away.


In ScalePad

  1. Navigate to the Microsoft Endpoint Manager add integration page and fill in the following information gathered previously:
    • Azure Tenant ID
    • Azure Application (client) ID
    • Azure Client Secret
  2. Click Save Microsoft Endpoint Manager Setup

👍

Setup successful

When you click Save Microsoft Endpoint Manager (Single Tenant) Setup, ScalePad will perform a full sync. When finished, you should be able to view your hardware assets in your account, as well as any software assets.