Configure Microsoft Entra ID for Universal ZTNA Microsoft Intune Integration

Use this task to configure the Microsoft Entra ID piece of a Universal ZTNA and Microsoft Intune integration.

Log in to Microsoft Entra ID.
Go to Manage > App Registrations.
Select New registration.
The system displays the Register an application page.
Enter an app name and ensure the Single Tenant option is selected under Supported account types.
Go to Manage > API Permissions.
Select Microsoft Graph (1).
The system displays the Request API permissions page.
Note
Application permissions must be granted.
Select the Applications permissions block.

Search for and select the following items:


Main search	Specific permission
Application	Application.Read.All
DeviceManagementManagedDevices	DeviceManagementManagedDevices.PrivilegedOperations.All DeviceManagementManagedDevices.Read.All
DeviceManagementServiceConfig	DeviceManagementServiceConfig.Read.All
Group	Group.Read.All
User	User.Read.All

Once they are all enabled, select Update permissions.
To enable permissions, select Grant admin consent for <domain>.

Once complete the system displays the API permissions.
Go to Manage > Certificates & secrets.
Select New client secret. The system displays the Add a client secret page.
1. Enter a description and select an expiry time from the drop-down list.
2. Select Add.
  In the Value column the secret value is revealed.
Copy the secret value and store it in a secure place.

Note
The secret value can only be viewed from this screen. If you navigate from this screen, the value will no longer be accessible.
Select Overview and copy the Application (client) ID and the Directory (tenant) ID.