The Intune integration allows IT teams to view all devices and users within their organization. By having this data within FMX, these IT teams can create tickets on their behalf, and audit what they have available.

This article will explain how to set up your Intune integration with FMX for your devices. These instructions are for users who have purchased the Intune integration and have already been added to prismatic. If you are interested in adding this integration please reach out to your account manager at FMX. Once an FMX team member reaches out you can begin the process with the below steps. 

Create Integration User

Skip this step if you already created the FMX integration user for the Intune user integration.

You will need to create an account in your FMX site for the integration to sync with. Name the account "Intune Syncer" this will make it easier to track the devices brought over to FMX. Use the email "Intune-syncer@gofmx.com". In order to do this you will need to create a new user type that will not be updated. If the integration’s user type is updated this can cause the integration to not work.

To create a new user type click the “Admin Settings" in the left sidebar then select the” User Types" tab at the top of the page. You can either select add “User Type” at the top of the page or click the vertical 3 dots next to a user type that may have full access like “FMX Administrator” and click “copy”. Name the user type “FMX Integration”. For more information on user types go to this support center article.

Next go to the following setting and make sure the user type has the following permissions:

  • Building & Resource Access
    • Read - Any
  • Equipment Access
    • Create
    • Read - Any
    • Update- Any
    • Retire - Any
    • Permitted Equipment Types Includes All Desired
      • If the user type does not have access to an equipment type you would want to sync with Intune then those devices would not sync.
  • User & Contact Access
    • Administer
    • Read Users
    • Read Contacts
    • Delete
  • Permitted Access to All Desired Custom Fields

You will use this information in the configuration step below.

Add Equipment Types

Please make sure that you have the equipment types in FMX updated for which Intune deivce groups would like them to map to. If they are not then you will have to go back in to reconfigure the integration for those types to be an option in prismatic.  See this support center article on how to add equipment types. 

Add Custom Fields

Add the required custom field in your FMX site before starting the integration steps. The custom field needs to be in FMX prior to the steps being completed so that you will be able to map the correct Intune field to correct FMX field. 

Add the following field:

  • Link to Intune: add this custom field for Equipment, that is a text field. Make sure that you do not limit the permitted user types or exclude any of the equipment types you want map over for this field so that the integration can work properly. 

Additionally, there are optional custom fields you can map over from Intune to FMX. See the table below for fields you can add prior to the integration setup. These fields can be added later and the integration can be updated. The FMX custom fields need to be text fields unless other wise noted in the name of the Intune field in parenthesis. These need to have the integration FMX user type as a permitted user type. They also need to be available for the equipment types you are syncing with Intune. The field mapping section of the article explains more. The required field above is needed for the integration to work.

  • Azure AD Device ID
  • Azure AD Registered
  • Compliance State
  • Device Category Display Name
  • Device Enrollment Type
  • Device Registration State
  • Device Name
  • Eas Activated
  • Eas Activation Date(Date)
  • Eas Device ID
  • Enrolled Date(Date)
  • Enrollment Profile Name
  • Ethernet Mac Address
  • Integrated Circuit Card
  • Identification (iccid)
  • Jail Broken Value
  • Last Sync Date(Date)
  • Managed Device Name
  • Management Agent
  • Manufacturer
  • Mobile equipment identifier (meid)
  • Model
  • Notes
  • Operation System
  • Os Version
  • Serial Number
  • Subscriber Carrier
  • Unique device identifier (udid)
  • User Display Name
  • User ID
  • User Principal Name
  • Wifi Mac Address

**See this support center article for how to add custom fields in FMX**

Intune Authentication Setup

**If you have already done this for the Intune user integration you do not need to do this again**

Follow the below steps for Intune authentication. This is needed for when you go to set up the integration in FMX. 

Go to your Azure portal: https://portal.azure.com/#home

  • In the search bar at the top of the page, search for “Intune.” In the drop down results, scroll down to the Microsoft Entra ID section and select the Intune Application.
  • Navigate to Manage > Authentication
    • Add a platform and choose Web under Web applications
    • Add “https://oauth2.prismatic.io/callback” into the Redirect URIs and click “Configure”
    • In the Implicit grand and hybrid flows section, select Access tokens (used for implicit flows)
    • In the Support account types section, select Accounts in any organization directory (Any Microsoft Entra ID tenant - Multi-tenant)
  • Navigate to Certificates and secrets
    • Under Client Secrets, add a new client secret
    • Enter a description and choose the desired expiration date. 
      • Once this client secret expires, a new client secret will need to be created and the Intune-FMX integration will need to be reconfigured with the new client secret.
    • Save the Secret ID value for the Client Secret in the Microsoft Intune Connection configuration in the Intune - FMX integration.
    • Navigate to the Overview page and save the value listed as the Application (client) ID. This will be your Client ID for the Microsoft Intune Connection configuration in the Intune-FMX integration.
  • Navigate to Manage > API permissions
    • Add a permission and choose Microsoft Graph
    • Choose Delegated permissions and add the following permissions:
      • DeviceManagementApps.Read.All
      • DeviceManagementManagedDevices.Read.All 
      • Group.Read.All 
      • GroupMember.Read.All 
      • User.Read.All 
      • Offline_access
    • Based on your company’s settings, status may need to be granted by your admin

Intune Group Setup

The integration allows users to map FMX equipment types and FMX buildings to Intune groups. Devices per group are based on the devices registered for the members of that group.

Go to the Integrations Settings

A member of the FMX team will reach out to you when your integration has been added to your FMX site.

In your FMX site go to your admin settings. Then go to the tab that says “Integrations”. In this section you will see all of the integrations you have on your FMX site through Prismatic. Prismatic is a platform that you will use to set up the integration between Intune and FMX. The platform is embedded into FMX and you will use it via the integrations tab. To access your integration to begin the setup process select the integration you would like to work on. If you do not see the Intune integrations reach out to your primary contact at FMX.

Intune Devices

Go to the integrations settings tab in your admin settings. To set up the Intune integration for your devices select the “Intune - Devices" in this tab. In order to start this process click the “Reconfigure” button.

1. Initial Configuration

For this step there is nothing that you need to do to complete this. Select "Next" to move on to the configuration section.

2. Configuration 

**If you set up the Intune user integration first use the same "Client ID", "Client Secret", "Hostname", "API User Password", and "API User Email" in this section. **

Next fill out the Client Id and Client Secret.  These were gathered in the above authentication steps. Once those are fields are fill out. Select the "Connect" button to connect the integration. 

Next, fill out the following fields in the FMX API Connection section:

  • Hostname - this is your FMX hostname. This can be found in the URL of your site and it is the text before “.gofmx.com”. For example: https://fmxschool.gofmx.com/. The bolded text is your hostname.
  • Password - this is the password of the FMX integration user you added earlier
  • API User Email - this is email address of the integration user you added earlier

Select the "Next" button when you are finished.

3. Device Group Mapping

In the section you will choose which Intune device group you want to include in the integration, as well as their respective equipment type. Only device groups selected below will be synced with FMX. Click the "+ Add to Intune Group Mapping" button to start mapping. Then in the "Intune Group" field you will choose a device group to map to an FMX equipment type from the equipment type field.

Choose to "Override Existing Equipment Type" or not by checking the box. When the box is checked the above equipment type selection will be applied to existing equipment in FMX belonging to this Intune device group. Otherwise, they will only be applied to new equipment.

Then choose to "Override Existing Building" or not by checking the box. When the box is checked the building mapping below will be applied to existing equipment in FMX belonging to this Intune device group. Otherwise, it will only be applied to new equipment.

Then continue this process by selecting "+Add to Intune Group Mapping".  When finished select the next button. 

4. Field Mapping

In this section you will map Intune device fields to custom fields in FMX. 

In the "Equipment Tag" choose the Intune field to match records from Intune to FMX. This field should contain a unique identifier that will be used as the equipment tag in FMX. Changes made to Intune will be automatically reflected in the mapped equipment types and buildings in FMX. Any changes made to mapped equipment types or buildings in FMX will be overridden by what is in Intune. 

***When first setting up the integration If you already have devices in FMX that you would like to have sync with what is in Intune so that they match. Then those equipment items in FMX need to have the equipment tag in FMX updated to the Intune field you will be using for the equipment tag. For example if you are choosing the serial_number field (from Intune) for the FMX equipment tag field then you will need to bulk update your FMX equipment items to have that as the tag name in FMX. For steps on how to bulk update equipment in FMX see this support center article.****

Next choose the custom field you had created earlier for the "Link to Intune". This field will be used to create a link to that specific device in FMX. 

Lastly select the "+ Add to Optional Custom Fields" button to add a field. These custom fields need to be in FMX when doing this phase. These fields can be mapped at a later time by selecting reconfigure in the integrations section of FMX. Then skip to the field mapping section. The fields will update on the equipment that is already synced in FMX. To map the fields choose the Intune field in the "Intune Field" drop down and then choose the corresponding FMX custom field from the "FMX custom field" drop down. Repeat this process until you have mapped all the fields you would like to have. When done click the "Finish" button. 

Updating the Integration

If changes need to be made to your integration you can update it at any time. To do this go back to the Integration Settings tab in FMX. Then find the integration and select "reconfigure". Make your updates and click Next to the last page of the configurations, and clicking the Finish button will ensure your changes are saved.

See this support center article for how to setup the Intune User Integration. 

Was this article helpful?

  • 0 out of 0 found this helpful