Ubuntu

1. Create the following shell file on your machine and name it intune_device_id.sh:

#!/bin/sh
echo $(awk -F' = ' '/^device_hint / {print $2;}' "/home/$USER/.config/intune/registration.toml" | tr -d "'" 2>/dev/null)

NOTE

This script works on Ubuntu only. Microsoft Intune does not support other Linux distributions. Because of this, set a condition in the AppGate ZTNA admin UI to apply this device claim to Ubuntu devices only (see Condition below).

2. In the AppGate ZTNA admin UI, go to Identity and then Device Claim Scripts.

3. Click + Add New and fill in the following fields:

   • Name: linux_intune_id

   • File: Upload the file intune_device_id.sh

4. Click Save.

5. Go to Identity and then Identity Providers.

6. Select the identity providers you use to authenticate your users. Scroll down to Configure On-demand Device Claims and click + Add.

7. Fill in the following fields:

8. Click Done, then click Save.

NOTE

For this device claim to take effect, the end user must log out of the AppGate ZTNA client and log back in.

Condition

This configuration works on Ubuntu only. Microsoft Intune does not support other Linux distributions. Set a condition in the AppGate ZTNA admin UI to apply this device claim to Ubuntu devices only:

1. Go to Access > Conditions and add a new condition referencing the risk rule you created in ZTP Cloud Console using Microsoft Intune.

2. Go to Access > Entitlements and add the condition to a new or existing entitlement to restrict access based on risk level.