Windows Autopilot
Device enrollment

Integrate an MDM provider with Windows Autopilot device association | Microsoft Learn

In brief

New documentation explains how MDM providers can request limited access to integrate their services with Windows Autopilot device association, including prerequisites, request details, review, and technical onboarding.

What Intune admins need to know

No action is required for individual administrators. The process is intended for MDM providers building device association into their services and does not provide direct administrator access.

This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

new file mode 100644

layout: Conceptual title: Integrate an MDM provider with Windows Autopilot device association | Microsoft Learn canonicalUrl: https://learn.microsoft.com/en-us/autopilot/device-preparation/device-association/mdm-provider-integration author: lenewsad ms.author: lanewsad ms.reviewer: madakeva manager: laurawi ms.service: windows-client ms.subservice: autopilot ms.suite: ems breadcrumb_path: /autopilot/breadcrumb/toc.json feedback_product_url: https://feedbackportal.microsoft.com/feedback/forum/ef1d6d38-fd1b-ec11-b6e7-0022481f8472 feedback_system: Standard permissioned-type: public uhfHeaderId: MSDocsHeader-Windows description: Learn how a mobile device management provider can request limited access to integrate its service with Windows Autopilot device association. ms.date: 2026-10-16T00:00:00.0000000Z ms.topic: how-to locale: en-us document_id: 21f85f33-86f2-39b4-1935-f7ad3105c4e9 document_version_independent_id: 21f85f33-86f2-39b4-1935-f7ad3105c4e9 original_content_git_url: https://github.com/MicrosoftDocs/memdocs-pr/blob/live/autopilot/device-preparation/device-association/mdm-provider-integration.md site_name: Docs depot_name: MSDN.autopilot page_type: conceptual toc_rel: ../../toc.json pdf_url_template: https://learn.microsoft.com/pdfstore/en-us/MSDN.autopilot/{branchName}{pdfName} feedback_help_link_type: '' feedback_help_link_url: '' asset_id: device-preparation/device-association/mdm-provider-integration moniker_range_name: monikers: [] item_type: Content source_path: autopilot/device-preparation/device-association/mdm-provider-integration.md cmProducts:


Integrate an MDM provider with Windows Autopilot device association | Microsoft Learn

Windows Autopilot device association can support integration with a mobile device management (MDM) provider other than Microsoft Intune. Provider integration is available through a limited-access onboarding process. Microsoft must authorize the Microsoft Entra application that the provider uses before the application can access the device association service.

Important

This process is for MDM providers that are building device association into their service. It doesn't provide an individual customer or administrator with direct access to the device association service.

Prerequisites

Before requesting access, the MDM provider should:

  • Support Windows device enrollment and management by using the Windows MDM protocols. For more information, see Mobile Device Management overview.
  • Integrate its MDM service with Microsoft Entra ID. For more information, see Microsoft Entra integration with MDM.
  • Register the Microsoft Entra application that the service uses to call device association APIs.
  • Define how customers authorize the provider to perform device association operations for their tenant.

Request access

Contact your Microsoft representative to request onboarding for Windows Autopilot device association. Include the following information:

  • The provider's legal company name and MDM product name.
  • Primary business and technical contacts.
  • The Microsoft Entra tenant ID for the provider.
  • The application (client) ID for each Microsoft Entra application and environment that requires access.
  • A description of the device association scenarios that the integration supports.
  • The expected customer scale, geographic availability, and planned release timeline.

Microsoft reviews the provider identity, application identity, and proposed use case. Microsoft might request additional technical, security, privacy, or compliance information during the review.

Note

Submitting a request doesn't guarantee approval. Microsoft doesn't publish a fixed review timeline for limited-access onboarding.

Complete technical onboarding

If the request is approved, Microsoft:

  1. Authorizes the approved Microsoft Entra application identity to use the device association service.
  2. Provides the provider with the applicable API, permission, and validation requirements.
  3. Defines the testing and production-readiness steps that must be completed before the integration is made available to customers.

Access is associated with the approved application identity and use case. It isn't transferable to another application or product. Contact Microsoft before changing an approved application ID, adding an environment, or materially changing the integration scenario.

Provider responsibilities

An approved MDM provider is responsible for:

  • Using device association access only for the approved MDM integration and scenarios.
  • Ensuring that each customer authorizes the provider to perform device association operations for the customer's tenant.
  • Requesting only the permissions required for the integration.
  • Protecting credentials and device, tenant, and association data.
  • Maintaining audit records for device association operations.
  • Providing customer support for the provider's implementation.
  • Notifying Microsoft about security incidents, ownership changes, or changes to the approved application identity or use case. \ No newline at end of file

Daily Intune.Admin.News

Get daily email updates

Get a concise summary of the latest Microsoft Intune updates delivered straight to your inbox.

Loading the secure signup form…