Device Management

PurpletGo + Microsoft Intune

Reads the devices assigned to a leaver and retires or wipes them on offboarding.

30-day free trial - no credit card required

The Microsoft Intune integration is in beta. Confirm results in Microsoft Intune after using it, and contact us if anything looks wrong.

What it does

What PurpletGo does in Microsoft Intune

Read the devices assigned to a departing employee and retire or wipe them when access is revoked.

Reads the devices assigned to the employee, so serial number and model do not have to be typed into the asset list by hand.
Retires each device, which removes company data and management and leaves the person's own data alone.
Wipes instead of retiring when you ask for it, which is a factory reset.
Reads each device back, so a command Intune rejects is reported rather than assumed.

What you need

A Microsoft Entra ID app registration with DeviceManagementManagedDevices.Read.All, and DeviceManagementManagedDevices.PrivilegedOperations.All to retire or wipe. Both need admin consent.
An active Microsoft Intune license on the tenant.

Plan

Team

Compare plans

Setup

Set up Microsoft Intune in PurpletGo

1
Open Integrations, find Device Management, choose Microsoft Intune and click Connect.
2
Paste the directory (tenant) ID, application (client) ID and client secret, and confirm your password.

Good to know

Retire and wipe are queued, not immediate: a device carries the command out when it next checks in, which can be days for a laptop left in a drawer. A confirmed result means Intune accepted the command, not that the device was wiped.
Only devices enrolled in Intune are visible. A laptop that was never enrolled has to be recovered by hand.

Why this matters

A laptop that never comes back is the most expensive thing a bad offboarding leaves behind, and the asset list is usually the least reliable record in the company because it is maintained by hand.

Microsoft Intune FAQ

Common questions about the Microsoft Intune integration

What does PurpletGo do in Microsoft Intune?

Read the devices assigned to a departing employee and retire or wipe them when access is revoked.

Why does recovering a Microsoft Intune device matter when someone leaves?

A laptop that never comes back is the most expensive thing a bad offboarding leaves behind, and the asset list is usually the least reliable record in the company because it is maintained by hand.

Which PurpletGo plan includes the Microsoft Intune integration?

Team.

What do I need to connect Microsoft Intune to PurpletGo?

A Microsoft Entra ID app registration with DeviceManagementManagedDevices.Read.All, and DeviceManagementManagedDevices.PrivilegedOperations.All to retire or wipe. Both need admin consent. An active Microsoft Intune license on the tenant.

Iru (formerly Kandji)

Offboard with every system accounted for

Some integrations need the Team or Enterprise plan, shown above.

Start free trial