Skip to content
finn.
Integrations Microsoft Intune

Integration · IT and identity

Microsoft Intune + Finn.

Microsoft Intune integration with Finn. Microsoft Intune manages work devices, applications, and endpoint configuration.

Discuss this integration Explore the workflows

The work behind the connection

What you can do with Microsoft Intune.

Microsoft Intune manages work devices, applications, and endpoint configuration.

Prepare a new employee's managed computer

Finn completes the device-administration work behind a new hire's setup, bringing the assigned computer into the right management groups and following the application results.

Typically handled byWindows and mobile device onboarding administrator

Starts when

An approved hire receives an enrolled computer that needs the role's standard setup.

What Finn handles

  1. Match the Workday employee and ServiceNow equipment request to the device inventory in Microsoft Intune.
  2. Apply the established role's device-group and configuration assignments without granting unrelated access.
  3. Start the required application deployment and follow enrollment, configuration, and installation results.
  4. Send the employee setup instructions and record the ready device and any specific failure in the onboarding case.

The result

The assigned computer has a documented setup result and the employee's readiness is visible to the onboarding team.

Deliver requested software through its installation result

Finn takes an employee's software request from its business approval to the installed application, using the device manager as the execution owner.

Typically handled byEndpoint application fulfillment team

Starts when

An employee requests an application from the service catalog.

What Finn handles

  1. Confirm the requested application, employee, managed device, and the software owner's approval in ServiceNow.
  2. Assign the application's existing deployment to the correct Microsoft Intune device or user group.
  3. Follow the installation result and provide any employee action required by the deployment.
  4. Confirm the application is available and complete the service request with the assignment and installation evidence.

The result

The software request ends with a reported installation outcome rather than an assignment that was never checked.

Run an operating-system update campaign

Finn coordinates the complete administrative cycle of an OS update, from the approved device population through employee communication and installation follow-up.

Typically handled byWindows and mobile endpoint update coordinator

Starts when

The endpoint owner approves an operating-system version and rollout window.

What Finn handles

  1. Identify eligible Microsoft Intune devices and the rollout's agreed groups, timing, and restart requirements.
  2. Create or assign the update plan through the product's supported update-management process.
  3. Notify employees and follow each targeted device's update progress during the rollout.
  4. Record successful versions in the ServiceNow change and open focused follow-up for devices that did not complete.

The result

The update campaign has device-level results and owned exceptions, without assuming every targeted machine was online or updated.

Apply a standard device configuration change

Finn takes a reviewed device configuration through assignment and result checking, connecting the change decision to what the managed computers actually report.

Typically handled byEndpoint configuration administrator

Starts when

IT approves a change to an established device profile or management setting.

What Finn handles

  1. Record the requested profile change, affected Windows and mobile devices, and approval in ServiceNow.
  2. Apply the reviewed profile or policy assignment to the selected Microsoft Intune device group.
  3. Follow device check-in and configuration reporting, coordinating any employee action the change requires.
  4. Check the expected setting and update the change record with completed devices and specific errors.

The result

The configuration change is deployed and its reported result is attached to the original authorization.

Contain a lost managed device

Finn executes the device actions authorized by the security response and connects their results to the identity team's separate account-containment work.

Typically handled byEndpoint security response team

Starts when

An employee reports a lost company device and security authorizes containment.

What Finn handles

  1. Match the report to the correct Microsoft Intune device and confirm the exact action authorized by the security owner.
  2. Issue the supported lock or other approved containment command for that device and operating system.
  3. Track the device's acknowledgment while connected Okta or Microsoft Entra handles separately authorized account actions.
  4. Record device and identity results in the security case, keeping an offline device's uncompleted action explicit.

The result

The incident contains evidence of what the device acknowledged and what account containment completed, without claiming universal instant protection.

Complete a device return and reassignment

Finn handles the administrative work of taking a returned computer out of its previous assignment and preparing it for the next approved employee.

Typically handled byIT device lifecycle administrator

Starts when

The asset team confirms receipt of a returned computer and authorizes its reuse.

What Finn handles

  1. Match the returned serial number to Microsoft Intune inventory and the former employee's ServiceNow asset record.
  2. Obtain the required data-retention and erase authorization before starting any destructive reset.
  3. Run the supported reset or reprovisioning process, then apply the next employee's approved setup assignments.
  4. Follow the reported device results and update the asset record with the completed ownership and readiness state.

The result

The returned computer has a documented preparation result for reassignment, with data-handling decisions explicitly recorded.

Repair a failed application deployment

Finn investigates the deployment failure behind an employee's software request and completes the documented correction without creating a new disconnected support journey.

Typically handled byEndpoint application support specialist

Starts when

Microsoft Intune reports that a required application did not install on a managed device.

What Finn handles

  1. Read the installation status, device inventory, targeting, and the deployment's documented prerequisites.
  2. Identify the actionable cause, such as an incorrect assignment or a prerequisite covered by an existing repair.
  3. Apply the correction within the original authorization and restart the deployment through its supported mechanism.
  4. Check the new installation result and update the original ServiceNow request with completion or the precise remaining issue.

The result

The employee's original software request reaches an evidenced deployment result with its troubleshooting history preserved.

Retire software that the application owner has removed

Finn completes the device portion of an approved software retirement, following removal results and keeping it separate from any application-account or subscription decision.

Typically handled byEndpoint software lifecycle team

Starts when

The application owner approves removal of a managed application from a defined device group.

What Finn handles

  1. Match the retirement decision to the application's Microsoft Intune deployment and affected devices.
  2. Remove the applicable deployment assignment or apply the supported managed-app uninstall action.
  3. Follow the device-reported removal results and coordinate any necessary employee restart.
  4. Record completed removals in ServiceNow while the identity and purchasing owners handle separate access or billing changes.

The result

The software retirement has device-level removal evidence, without treating uninstalling an app as closing its subscription or account.

Connection setup

Set up the connection around your work.

Contact Finn to discuss the records your workflow needs and the actions you want it to perform.

Your team chooses what Finn can access, what agents can change, and when a person must approve the work. The connection needs the appropriate account access and permissions from Microsoft Intune.

Visit Microsoft Intune

The Finn platform

Finn Agents

Help customers. Work with your team. Finish the job.

Explore Agents

Finn Systems

Business apps for the work behind the conversation.

Explore Systems

Finn AI Gateway

Control connected AI apps, models, access, and spending.

Explore AI Gateway

Meet Finn

Put your Microsoft Intune integration to work.

Tell us which records, actions, and teams the connection needs to support.

Discuss your workflow Get started