Open SobriiTeam opened 1 year ago
aaronparker
commented
6 months ago VcRedist documentation for authentication to Intune updated here: https://vcredist.com/import-vcintuneapplication/. This includes what's needed to get an app registration to authentication to Intune.
solarplex
commented
3 months ago Im able to authenticate with Intune but the operation seems to fail at POSTing to graph.microsoft.com/Beta/deviceAppManagement/mobileApps
VERBOSE: POST https://graph.microsoft.com/Beta/deviceAppManagement/mobileApps
WARNING: An error occurred while creating the Win32 application. Error message: UnknownError: {"ErrorCode":"Forbidden","Message":"{\r\n \"_version\": 3,\r\n \"Message\": \"An error has occurred - Operation ID
(for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID: ** - Url:
https://fef.amsua0602.manage.microsoft.com/AppLifecycle_2405/StatelessAppMetadataFEService/deviceAppManagement/mobileAp ps?api-version=5024-03-08\",\r\n \"CustomApiErrorPhrase\": \"\",\r\n \"RetryAfter\": null,\r\n \"ErrorSourceService\": \"\",\r\n \"HttpHeaders\": \"{\\"WWW-Authenticate\\":\\"Bearer realm=\\\\"urn:intune:service,*,*****\\\\"\\"} \"\r\n}","Target":null,"Details":null,"InnerError":null,"InstanceAnnotations":[]}
Following this: https://vcredist.com/import-vcintuneapplication/#examples
And got this with the Enterprise Apps created by default:
VERBOSE: POST https://graph.microsoft.com/Beta/deviceAppManagement/mobileApps WARNING: An error occurred while creating the Win32 application. Error message: Forbidden: { "_version": 3, "Message": "Application is not authorized to perform this operation. Application must have one of the following scopes: DeviceManagementApps.ReadWrite.All - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000
Then, I authenticated to Azure AD using a new Azure AD Apps where I manually put all required permissions, and I got this:
VERBOSE: POST https://graph.microsoft.com/Beta/deviceAppManagement/mobileApps WARNING: An error occurred while creating the Win32 application. Error message: UnknownError: {"ErrorCode":"Forbidden","Message":"{\r\n \"_version\": 3,\r\n \"Message\": \"An error has occurred - Operation ID (for customer support): 00000000-0000-0000-0000-000000000000 - Activity ID: e13e850d-fa50-444a-ae80-695aff174bfa - Url:
https://fef.msub06.manage.microsoft.com/AppLifecycle_2308/StatelessAppMetadataFEService/deviceAppManagement/mobileApps? api-version=5023-06-15\",\r\n \"CustomApiErrorPhrase\": \"\",\r\n \"RetryAfter\": null,\r\n \"ErrorSourceService\": \"\",\r\n \"HttpHeaders\": \"{\\"WWW-Authenticate\\":\\"Bearer realm=\\\\"urn:intune:service,9225b241-44e1-44a8-8bfe-c10e39177505,f0f3c450-59bf-4f0d-b1b2-0ef84ddfe3c7,3e9c57b9-808 d-4aa0-9500-4b2d369279e7\\\\"\\"}\"\r\n}","Target":null,"Details":null,"InnerError":null,"InstanceAnnotations":[]} VERBOSE: Current authentication token expires in (minutes): 59
:-( !