What evidence does this connector collect?
ControlMap connects to Intune to collect the following as Evidence
- List of users, their MFA status, and the employee email associated with the account from the MS Intune application.
- List of assets configured and their owners from MS Intune.
What compliance checks does this connector collect?
- All user accounts in MS Intune are assigned an employee / owner
- Each device in MS Intune has an owner assigned
- MS Intune admins have MFA enabled
- MS Intune users have MFA enabled
How to connect?
You can connect to MS Intune by providing the tenant Id of your MS Intune instance. The tenant ID can be accessed here by logging in as an admin.
https://endpoint.microsoft.com/#settings/directory
Note the tenant id of the Current directory.
Once you have access to the tenant ID, enter the tenant ID in the ControlMap connection screen and follow the prompts to authorize ControlMap to access your company's Intune environment.
Step 1 -> Provide Tenant ID in your connection settings screen & click Connect To Intune
Step 2 -> Provide the required authorization to ControlMap to fetch information from Intune.
Necessary Permissions from Intune for Integration to function as intended:
Why do I see an UNVERIFIED message?
ControlMap application is not published by Microsoft, and ControlMap is also not a Microsoft partner hence by default, an unverified message is displayed. ControlMap is working with Microsoft Support to find other ways such as domain authentication to clear that message.