MS Intune

Microsoft Intune

This integration enables mobile devices, workstations, and desktops enrolled or managed in Intune to authenticate to corporate applications and resources without the need for usernames, passwords, or tokens for access. Using preconfigured certificate templates and automated lifecycle operations, IT teams can eliminate manual enrollment and avoid costly authentication disruptions while maintaining a high level of security.

What it does

• Integrates DigiCert® Trust Lifecycle Manager with Microsoft Intune for certificate-based device and user authentication.
• Automates certificate enrollment, renewal, and revocation through the Simple Certificate Enrollment Protocol (SCEP).
• Uses preconfigured templates for device and user authentication to corporate resources.
• Synchronizes certificate events with Intune for real-time lifecycle updates and revocation handling.
• Centralizes certificate visibility and policy control

Why it matters

• Improves user experience: Enables seamless access without passwords, tokens, or repeated sign-ins.
• Reduces helpdesk workload: Eliminates manual certificate requests and resets due to expiration or user error.
• Strengthens security posture: Enforces consistent, policy-based certificate issuance and revocation.
• Prevents access outages: Automates renewals to ensure endpoints always have valid credentials.
• Supports hybrid environments: Extends consistent identity assurance across mobile, desktop, and workstation endpoints.

How it integrates

• Trust Lifecycle Manager connects with Microsoft Intune via a cloud-based API and purpose-built connector.
• Certificates are issued automatically to Intune-managed devices.
• Synchronizes lifecycle events—issuance, renewal, and revocation—between DigiCert and Intune.
• Administrators manage policies and certificate templates directly from Trust Lifecycle Manager.

Resources

• Microsoft Intune SCEP Integration Guide
• Microsoft Intune Connector
• Case Study: User and device authentication
• Security Solutions for Devices and Flexible MDM/UEM Management