To connect Dex to Microsoft Intune for device management, grant the Entra app the DeviceManagement Graph application permissions.
Steps
1In the Microsoft Entra admin center, open your app registration (or reuse the M365 Base app).
2Under API permissions → Add a permission → Microsoft Graph → Application permissions, add DeviceManagementManagedDevices.Read.All (use .ReadWrite.All for actions like remote wipe); add DeviceManagementConfiguration.Read.All and DeviceManagementApps.Read.All as needed.
3Click "Grant admin consent for <tenant>" and confirm the green checkmarks.
4Provide Dex the Tenant ID, Client ID, and Client secret.
Paste into Dex
The connection form in the Dex app store asks for these values:
