Subscription note: Presence integrations were available on our Legacy Workplace Premium plan. Our current Workplace plan requires an Enterprise platform for access to Presence.
Overview
By connecting to your Microsoft Intune account, you can sync the MAC addresses of employees' managed devices to Envoy. This enables automated use of Wi-Fi-based presence integrations, like Cisco Meraki and Aruba Central. Microsoft Intune cannot be used for presence detection on its own.
How does MAC address syncing work?
Envoy's Wi-Fi presence detection uses device MAC addresses to associate signals with employees. Microsoft Intune maintains a record of employee devices along with their MAC addresses. By integrating directly with Microsoft Intune, Envoy can automatically sync this data, eliminating the need for manual CSV uploads and improving the accuracy and reliability of presence detection.
Note: See how to view MAC addresses.
Configuration
Navigate to Integrations, then search for Microsoft Intune.
Click Install.
To begin, click Connect Account to launch the connection window.
Click Connect to open the Microsoft login screen. (If you're already logged in to your account, you won't see this!) Log in to your Microsoft account.
If you would like to use your own App Credentials, follow the instructions below.
Read through the permissions required, then check the box next to Consent on behalf of your organization.
Once the connection is established, click Save.
After connecting, Envoy will be able to receive the Intune-registered device MAC addresses and the email of the employee they belong to.
Using your own App credentials
As an alternate connection method, you can create a custom app in the Entra admin center. This is a bit more advanced, and you'll need to follow these steps exactly to ensure proper connectivity.
In your Entra admin center, navigate to App registrations in the admin sidebar.
Click New registration.
Give your application a descriptive Name.
Set the Redirect URL as https://workflows.envoy.com.
Click Register. This creates a Client ID.
Now you'll need to set permissions for the custom app. Navigate to API permissions > Add a permission > Microsoft Graph > DeviceManagementManagedDevices > DeviceManagementManagedDevices.Read.All, then add the permission.
Now we'll be able to provide MAC addresses to Envoy. On the Overview page, click Add a certificate or secret.
Click New client secret. Enter a description and set an expiry period. Click Add.
In Step 4 of the Envoy configuration, enter your Client ID, Client Secret, then click Connect, and Save.
After connecting, Envoy will be able to receive the Intune-registered device MAC addresses and the email of the employee they belong to.