15.3 Enhancements for Asset Management (TIPWeb-IT)

Frontline Education is pleased to announce the latest enhancements for Asset Management (formerly TIPWeb-IT), which includes Microsoft Intune MDM integration.

Microsoft Intune MDM Integration

Frontline Asset Management version 15.3 officially supports Microsoft Intune MDM integration. This release continues our commitment to flexible MDM connectivity and improves device visibility by syncing key device data directly from the Microsoft Intune API.

Key Capabilities

• MDM field synchronization: Automatically imports device properties including: device name, MAC address, last seen date, OS version, and MDM status.
• Nightly sync via API: A read-only job runs every night, ensuring asset data stay current. Devices are matched by serial number.
• On-demand sync: District Administrators can initiate a one-time sync via the "Microsoft Intune Integration Settings" screen to validate credentials or fetch latest data.
• Field mapping: Microsoft Intune MDM fields are mapped to Asset Management system-defined fields, viewable in the "Tags" grid, "Tag Information" modal, and applicable reports.

Data Fields Pulled from Microsoft Intune

The Microsoft Intune MDM integration currently supports six key device fields in Asset Management. At this time, external IP, internal IP, lat/long, and last login date are not provided through the Microsoft Intune API.

Setup and Authorization

Enablement Prerequisites

• Microsoft Intune/Microsoft Entra Administrator rights – You must be a Global Administrator or have the Cloud Application Administrator and Microsoft Intune Administrator roles.
• Microsoft Microsoft Intune license – Any tenant with Microsoft Intune Plan 1 or higher supports API integrations through Microsoft Graph.
• Asset Management access – You must be a District Administrator in Frontline Asset Management to configure integrations.

Setup and Verification

1. Log in to Frontline Asset Management with District Administrator rights.
2. Under Management, click Integration Settings > Microsoft Intune Integrations.
3. In the Tenant ID, paste the Directory (Tenant) ID from Microsoft Intune Manager console.
4. In the Client App ID field, paste the Application (Client) ID with device-read access, generated from Microsoft Intune Manager console.
5. In the Client Secret field, paste the API Value (Client Secret) password from the Microsoft Intune Manager console.
6. Click Save to verify the Microsoft Intune credentials entered.
7. Click Initiate One-Time Sync to run the first sync manually.

Microsoft Intune Integration Status

The "Microsoft Intune Integration Status" grid gives administrators a clear view into recent sync activity between your Microsoft Intune MDM and Frontline Asset Management, including job status, logs, and error tracking.

The integration grid includes a real-time sync log that displays:

• Started – The date and time the sync began
• Job ID – A unique identifier for each sync attempt
• State – Status of the sync (e.g., "DataImported," "Queued," "Processing," "Error")
• Notes – Displays summary info for failed jobs or flags issues requiring attention
• Clipboard icon – Click to open a step-by-step breakdown of sync activity for that job.

When you click the log icon for a sync job, you will see a timestamped list of every step in the process, including:

• Queued
• Processing
• Authenticated
• DataExtracted (device count shown)
• DataUploaded
• DataTransformed
• DataImportInitiated
• DataImported

Monitoring, Verification, and Data Access

Nightly Sync Logic

• Runs once every night
• Matches devices by serial number; no serial, no update
• Duplicate serials trigger a warning and are skipped.

Verifying a Sync

• Check the "Job History" grid for "Completed" status.
• Compare values with Microsoft Intune if needed.
• Open a tag record and confirm MDM fields are populated.

Viewing MDM Data

Known Limitations

• Duplicate serials are skipped.
• Devices must pre-exist in Asset Management; the sync does not create assets.
• Some data fields may not be populated, depending on device type or availability of the data from Microsoft Intune’s APIs.
• Detailed import reports are not supported at this time (e.g. "synced 100 devices, 50 were skipped due to duplicate serial number").
• Integration is read-only; no changes are written back to Microsoft Intune (e.g., no OU changes or provisioning/deprovisioning).
• Integration currently does not support audit workflows.
• Some data points may be blank if Microsoft Intune does not supply them for a given device type.
• No CSV download of device import information is yet available to see which serials were updated, skipped or not found.

Previous Releases

The following are release notes for prior releases.