# Connect Microsoft Intune to Microsoft Teams > Keep your devices compliant and your teams informed by integrating Intune device management directly with Microsoft Teams notifications and workflows. **Canonical page:** https://tray.ai/connectors/microsoft-intune-microsoft-teams-integrations/ **Microsoft Intune connector:** https://tray.ai/connectors/microsoft-intune-integrations/ **Microsoft Intune documentation:** https://tray.ai/documentation/connectors/service/microsoft-intune **Microsoft Teams connector:** https://tray.ai/connectors/microsoft-teams-integrations/ **Microsoft Teams documentation:** https://tray.ai/documentation/connectors/service/microsoft-teams ## Overview Microsoft Intune and Microsoft Teams are two core parts of any Microsoft 365 environment — one handles device health and security policy, the other handles day-to-day communication. When they run separately, IT teams end up manually chasing compliance violations, onboarding delays, and security incidents with no reliable feedback loop. Connecting Intune with Teams through tray.ai brings device management events to the people who need to act on them, turning raw compliance data into real-time alerts that are actually useful. Organizations using Intune for endpoint management and Teams for internal communication run into the same problem: device compliance events rarely reach the right people in time. A non-compliant device, a failed enrollment, or a policy violation can sit unresolved for hours when IT staff have to watch Intune dashboards manually. Connecting the two through tray.ai means IT and security teams get instant channel notifications when a device falls out of compliance, employees hear directly when their device needs attention, onboarding tasks get routed to the right IT staff in dedicated Teams channels, and remediation workflows close the loop automatically — no custom code needed. Mean time to resolution drops, onboarding gets less chaotic, and your security posture improves without adding headcount. ## Use cases ### Real-Time Device Compliance Alerts in Teams When Intune detects a device falling out of compliance — an outdated OS, missing encryption, a policy violation — tray.ai automatically sends a structured alert to a designated Teams channel. IT staff can see the device owner, policy failure reason, and severity level without ever leaving Teams. Manual dashboard monitoring goes away, and response times drop fast. - Instant visibility into compliance failures without requiring Intune dashboard access - Structured alert cards with device details, user info, and violation type posted directly in Teams - Faster detection and resolution for endpoint compliance issues ### Automated Employee Device Onboarding Notifications When a new device is enrolled in Intune during employee onboarding, tray.ai sends a personalized Teams message to the new hire with setup instructions, links to required apps, and IT support contacts. The assigned IT team member gets a Teams notification at the same time to confirm enrollment or step in if something goes wrong. It's a consistent experience that doesn't require anyone to babysit the process. - Personalized welcome messages sent to new hires via Teams the moment their device is enrolled - IT staff notified immediately if enrollment fails, reducing onboarding delays - Consistent onboarding experience across departments without manual IT intervention ### Security Incident Escalation Workflow When Intune flags a high-severity security event — a jailbroken device, malware detection, or disabled security baselines — tray.ai routes a prioritized alert to a dedicated security incident channel in Teams and optionally creates a task or ticket. The alert includes remediation steps, device owner information, and a clear escalation path so the right people can move quickly. - High-severity Intune security events automatically routed to the correct Teams security channel - Alerts include device owner, risk level, and recommended actions - Faster incident response by cutting manual triage and communication handoffs ### Device Retirement and Offboarding Coordination When an employee leaves and their device is wiped or retired in Intune, tray.ai posts a confirmation to the IT offboarding channel in Teams and notifies relevant stakeholders like HR or asset management. Everyone stays aligned without anyone having to send manual status updates, and you get an auditable communication trail for compliance. - Automatic Teams notifications confirm device wipe or retirement upon employee offboarding - IT, HR, and asset management teams stay aligned in a single workflow - Auditable record of offboarding actions communicated through Teams for compliance purposes ### Policy Update Announcements to IT Teams When a new configuration profile or compliance policy is pushed in Intune, tray.ai automatically posts a summary to the relevant IT Teams channel — which policy changed, which device groups are affected, who approved it. Distributed IT teams stay on the same page during rollouts, and the usual miscommunication that comes with large policy changes drops considerably. - Policy change summaries automatically posted to IT Teams channels after Intune updates - Affected device groups and user populations clearly communicated to all stakeholders - Less IT miscommunication during large-scale policy rollouts ### Conditional Access Failure Notifications for End Users When an end user gets blocked from a Microsoft 365 resource because of a conditional access policy enforced by Intune, tray.ai sends them a proactive Teams message explaining what happened and what they need to do to fix it. Users get self-service guidance before they ever think to open a helpdesk ticket. - End users receive immediate, plain-language Teams messages when conditional access blocks them - Self-service remediation steps reduce IT helpdesk ticket volume significantly - Less confusion around access denial events for employees ### Weekly Device Compliance Summary Reports On a schedule, tray.ai queries Intune for device compliance statistics across the organization and posts a formatted summary report to a Teams channel used by IT managers or security leadership. Compliant vs. non-compliant counts, top policy violations, trend data — all without manual exports. - Automated weekly or daily compliance summaries posted directly to Teams leadership channels - No manual Intune report exports required to keep management informed on device health - Trend visibility helps IT leadership spot recurring compliance issues before they compound ## Templates ### Intune Non-Compliance Alert to Teams Channel This template monitors Intune for device compliance state changes and automatically posts a detailed alert card to a specified Microsoft Teams channel whenever a device becomes non-compliant, including device name, user, policy violated, and timestamp. Connectors used: Microsoft Intune, Microsoft Teams ### New Device Enrollment Welcome Message to Employee via Teams When a new device is successfully enrolled in Intune, this template sends a personalized welcome and setup guide via Teams direct message to the device owner, while notifying the assigned IT technician in a separate channel to confirm the enrollment. Connectors used: Microsoft Intune, Microsoft Teams ### High-Severity Intune Security Event to Teams Security Channel This template detects high-severity security events in Intune — such as jailbreak detection or non-compliant encryption — and immediately routes a prioritized alert to a dedicated Teams security operations channel with recommended remediation steps. Connectors used: Microsoft Intune, Microsoft Teams ### Device Offboarding Notification to IT and HR Teams Channels When a device is wiped or retired in Intune as part of an employee departure, this template automatically notifies the IT offboarding channel and an HR coordination channel in Teams, providing a confirmation summary with device details and offboarding status. Connectors used: Microsoft Intune, Microsoft Teams ### Scheduled Weekly Compliance Report Posted to Teams This template runs on a weekly schedule, queries Intune for organization-wide device compliance statistics, and posts a formatted summary report to a Teams channel used by IT managers or security leadership. Connectors used: Microsoft Intune, Microsoft Teams ### Conditional Access Block — Self-Service Remediation Message via Teams This template detects when a user is blocked by a conditional access policy tied to Intune device compliance and automatically sends them a Teams direct message with the reason for the block and step-by-step instructions to restore access. Connectors used: Microsoft Intune, Microsoft Teams ## Challenges Tray.ai solves ### Mapping Intune Device Identities to Teams Users Intune manages devices using device IDs, Entra (Azure AD) object IDs, and UPNs, while Teams routes messages to users by their Teams user ID or UPN. Reliably connecting a device event to the correct Teams user — especially in organizations with guest accounts, shared devices, or name variations — requires careful identity resolution logic that's hard to maintain manually. **How Tray.ai helps:** tray.ai provides a flexible data mapping layer that resolves Intune device owner UPNs to Microsoft Teams user identities using intermediate API calls, conditional logic branches, and lookup tables. The right person gets the right notification without anyone maintaining hardcoded identity mappings. ### Handling High-Volume Compliance Events Without Alert Fatigue In large enterprises with thousands of managed devices, Intune can generate a flood of compliance state changes in a short window — especially after a policy update or OS rollout. Sending every single event as a Teams notification without any filtering or aggregation buries IT channels and trains people to ignore them. **How Tray.ai helps:** tray.ai lets teams build filtering, deduplication, and aggregation logic directly into their workflows. Events can be batched into digest messages, filtered by severity or device group, or throttled to prevent channel flooding — so IT teams get signal without the noise. ### Maintaining Workflow Reliability Across Microsoft API Rate Limits Both the Intune and Teams APIs enforce rate limits that, when hit during peak automation activity, cause failed API calls and dropped notifications. Integrations built without proper retry and error-handling logic miss alerts at exactly the wrong moments. **How Tray.ai helps:** tray.ai includes built-in retry logic, exponential backoff, and error branching so API rate limit responses are handled without anyone having to intervene. Failed calls are automatically retried, and fallback logic can queue or re-route notifications so no compliance event gets silently dropped. ### Keeping Workflows Current as Intune Policies and Teams Structures Evolve Organizations frequently update Intune compliance policies, add new device groups, or restructure Teams channels and memberships. Custom integration scripts built outside a managed platform go stale quickly — routing alerts to archived channels, missing new policy categories, and requiring constant developer attention to fix. **How Tray.ai helps:** tray.ai's visual workflow builder makes it straightforward for IT operations teams to update routing logic, add new Teams channels, or adjust Intune trigger conditions without touching code. Workflows can be versioned, tested, and updated independently of the underlying Microsoft environment. ### Ensuring Secure Credential and Token Management for Both Services Integrating Intune and Teams requires authenticated access to the Microsoft Graph API using OAuth tokens scoped appropriately for device management and messaging. Managing token refresh cycles, permission scopes, and credential rotation outside a dedicated integration platform is a real operational burden. **How Tray.ai helps:** tray.ai handles OAuth 2.0 authentication, token refresh, and secure credential storage natively for both Intune and Teams. IT teams authorize their connections once through tray.ai's secure connector framework, and all subsequent token lifecycle management runs automatically — no credentials sitting in scripts or environment variables. ## Learn more - Intelligent Integration: https://tray.ai/platform/intelligent-ipaas/ - Merlin Agent Builder: https://tray.ai/platform/merlin-agent-builder/ - Agent Gateway for MCP: https://tray.ai/platform/agent-gateway/ - Book a demo: https://tray.ai/contact/