settings.json
|
{ // REQUIRED PARAMETERS // The application ID that is in the Partner tenant. // The application must be a multi-tenant application // The application must have the user_impersonation permission in Microsoft Partner Center (app ID fa3d9a0c-3fb0-42cc-9193-47c7ecd2edbd) "PARTNER_APP_ID": "", // The application ID that is in the Client tenant. // If the application does not exist, the application will be created. // It is ideal to keep the application ID the same as PARTNER_APP_ID, // else the technician will need to re-authenticate. "CLIENT_APP_ID": "", // If the application does not exist, // the following name will be used to create the application "CLIENT_APP_NAME": "", // OPTIONAL PARAMETERS // Make both applications use the device code flow. // This will prompt the technician to type in a code to https://microsoft.com/devicelogin // This is the more secure option, in theory, because technicians // do not sign in to client machines. By default, this is disabled. // Both applications must have device code flow enabled (App registration > Authentication) // for this to work. If partner and client app IDs are the same, only the partner app registration // needs device code flow enabled. "DEVICE_CODE_AUTH": true, // Use the following to set a default group tag. // Setting FORCE_DEF_GROUP_TAG to true will force the group tag specified // and bypass user input. "DEFAULT_GROUP_TAG": "", "FORCE_DEF_GROUP_TAG": true, // Use the following to set a default client tenant. // You can specify a tenant ID or a domain belonging to the tenant // Setting FORCE_DEF_TENANT to true will force the tenant specified // and bypass user input. "DEFAULT_TENANT": "", "FORCE_DEF_TENANT": false, // Enable the ability to assign users. // https://learn.microsoft.com/en-us/autopilot/tutorial/user-driven/azure-ad-join-assign-device-to-user // Note that, due to least privilege, users cannot be verified present // in the client tenant. "ENABLE_ASSIGN_USER": false, // Set a timer to allow Intune to soak, in seconds. // This makes it easier to reboot directly into the Autopilot interface. // Set to 0 to disable. Default is 300 (5 minutes). "SOAK_TIME": 300 } |