IntelligentHQ
IntelligentHQ
Skip to content

Identity and endpoint management

Identity, access and device management: the Microsoft Entra family (Entra ID, ID Governance, ID Protection, Private and Internet Access, External ID, Workload ID, Agent ID) and Microsoft Intune for managing devices and apps on Windows, macOS, iOS, Android and Linux.

2 technology profiles in this area

In this area

Overview

Microsoft Entra ID is the identity service behind every Microsoft 365, Azure and Dynamics CRM Online tenant. Around it Microsoft offers ID Governance (access reviews and lifecycle), ID Protection (risk-based access), Private Access and Internet Access (network access without a VPN), External ID for customers and partners, Workload ID for apps and services, and Agent ID for AI agents.

Microsoft Intune manages whole devices (MDM) and work apps (MAM) on Android, iOS/iPadOS, Linux, macOS, tvOS, visionOS and Windows. It relies on Entra for sign-in and groups, and sends device compliance to Conditional Access so access decisions use current device health.

Entra Agent ID is available to all Entra customers, but extending Entra security features to agents requires Microsoft Agent 365.

Smaller organizations may find the Entra and Intune features in their existing Microsoft 365 plan sufficient; advanced capabilities come through Microsoft 365 plans, the Intune Suite or standalone add-ons.123

Problems it addresses

  • VPN-dependent remote access1

    Entra Private Access connects remote users to internal apps and resources without a VPN.

  • Joiners, movers and leavers1

    ID Governance automates access requests, assignments and reviews, and removes access when people leave.

  • Personal devices with work data2

    Intune app protection secures data inside work apps such as Outlook and Teams and can wipe only that data when someone leaves.

  • Agents acting with broad permissions3

    Agent ID gives each agent a governed identity with least-privilege access and an audit trail of its actions.

A typical workflow

  1. Secure sign-in1

    Use risk-based Conditional Access with ID Protection, for example requiring multifactor authentication for medium or high sign-in risk.

  2. Enroll devices2

    Enroll corporate devices through Windows Autopilot, Apple Automated Device Enrollment or Android Enterprise.

  3. Link device health to access2

    Send Intune compliance to Entra Conditional Access so non-compliant devices are blocked from company resources.

  4. Automate account lifecycle1

    Use ID Governance to assign and remove accounts, groups and licenses as people join and leave.

  5. Get AI help for admins2

    Use Copilot in Intune, powered by Security Copilot, to summarize policies and flag conflicts.

Technologies

  • Suite

    Microsoft Entra

    Microsoft Entra is Microsoft's family of identity and network access products. Entra ID (formerly Azure Active Directory) handles sign-in, MFA and Conditional Access; other members cover governance, identity risk, external and workload identities, VPN-free private access, internet access and identities for AI agents.

    • Security
    • Agents
  • Cloud service

    Microsoft Intune

    Microsoft Intune is a cloud endpoint management service. It enrolls and configures Windows, macOS, Linux, iOS/iPadOS, Android, tvOS and visionOS devices, deploys and protects apps (including on personal devices) and reports device compliance to Microsoft Entra Conditional Access.

    • Security
    • Infrastructure

Use cases

Next steps

  1. Map which Entra and Intune features your current Microsoft 365 licenses already include.

  2. Pilot a risk-based Conditional Access policy with a small group before applying it to everyone.

  3. Start an Intune trial on a test group of devices.

  4. Decide how agent identities will be requested and approved before teams deploy agents.

Connected areas

Sources

  1. What is Microsoft Entra? (opens in a new tab)Microsoft · Vendor-reported
  2. What is Microsoft Intune? (opens in a new tab)Microsoft · Vendor-reported
  3. What is Microsoft Entra Agent ID? (opens in a new tab)Microsoft · Vendor-reported

Fill out the form below to request your copy.

Name(Required)