• Freshservice Domain Name

• Freshservice API Key

• Client Id

• Client Secret

• Intune Domain name

• Intune Username

• Intune Password

The Field Mapping section will be shown once the given parameters are valid. This section allows the user to set up a mapping between Freshservice and Intune fields. There are two sections available in the mapping field sections which are mentioned below:

• Computer

• Mobile

The Assets will be created based on the data provided from the Mapping of Freshservice fields with the intune Fields. There will be default mapped fields in which users can change those mapping fields.

When the field mapping is done, the user will be navigated to the device action page by clicking the Next button. Then the user will have the option to perform the device action for the intune devices. The user can enable the device action by providing the azure login credentials (Username and Password) (Administrator Login) and then choose the agents in the Freshservice who are allowed to perform this device actions.

After Installing the app, the recent sync history will appear as the sync logs in the account configuration page. To establish the sync between Freshservice and the Intune immediately, Click the Sync Now button. The default value of the Sync Frequency Interval is set to Weekly. The user can change the value of the Sync Frequency interval to Daily for creating the assets, but the updates will happen weekly.

The App contains the device health information and allows us to do device actions from the Freshservice like wipe, reboot, retire, etc.

Once the Sync process has been completed, if the asset is deleted or removed from the Freshservice manually, it will neither be created or updated.

• Hardware

• Computer

• Mobile

Above highlighted asset type names (Hardware, Computer, Mobile) are taken as reference in the Intune Freshservice Integration App. If you change or disturb the name of these asset types, this Integration App will throw an error as "Cannot read property of id undefined"

• 1. Sign in to the Azure portal.

• 2. On the top bar, click on your account and under the Directory list, choose the Azure Active Directory to register your application.

3. Click on App registrations.

4. Click New Registration.

5. Enter the name of the application to register with the provided name and select the account type for your application to support the Single-tenant. Click the register button

6. After registering the application, the Application Id will be generated for your application by Microsoft Azure. This application Id is also known as the Client Id.

7. To generate the Client Secret, click Certificates & secrets and it displays the blade which contains the client secret section. Then click the New Client secret button and it opens up with the modal view to provide a description for the client secret and expiry period for the client secret. To achieve a never ending expiry period for the client secret, choose the Never option.

8. The Client Secret will be generated and copy the new client secret value. You won't be able to retrieve it after you perform another operation or leave this blade.

9. To provide the API Permission for the application, click API permissions and then click the “add a permission” button. Then it displays the blade with the list of all Microsoft APIs. Every API Permission will have two sections. They are

• Delegated Permissions

• Application Permissionss

• Microsoft Graph

• Intune

Delegated Permission

• Device.Command

• Device.Read

• DeviceManagementManagedDevices.PrivilegedOperations.All

• DeviceManagementManagedDevices.Read.All

• DeviceManagementManagedDevices.ReadWrite.All

App Permission

• Device.ReadWrite.All

• DeviceManagementManagedDevices.Read.All

App Permission

• get_device_compliance

Add each API Permission and then click the Add Permission button. After adding these two API permissions, Click the Grant admin content for the organization name button.