Overview of BeyondCorp Enterprise integration with Microsoft Intune

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). Microsoft Intune helps administrators assess the security posture of managed devices within their organization. Google's BeyondCorp Enterprise integrates with Microsoft Intune to let you ensure that the devices connecting to your organization's web resources and applications are authorized, secured, and managed as per your organization's policies.

When to use BeyondCorp Enterprise integration with Intune

Use this integration when you want to collect the real-time information about the devices in your organization using Intune, and use this information to manage your devices and control access to your organizational resources using BeyondCorp Enterprise.

How BeyondCorp Enterprise works with Intune

BeyondCorp Enterprise uses a zero trust model to grant access to your organizational resources based on a user's device identity and context of the request.

In this integration, Intune collects the real-time device information and provides this information to BeyondCorp Enterprise. The BCE Intune connector collects data from Intune using Microsoft Graph APIs. Access Context Manager, which is a part of BeyondCorp Enterprise, uses the device information collected by the BCE Intune connector, and provides security-based access control to your resources by using access levels.

The following diagram shows how BeyondCorp Enterprise works with Intune:

Architecture diagram

What's next