Connect to Intune with Master Packager Toolbox

💎 Master Packager Pro feature

To enable uploading Intune packages using Master Packager Toolbox there are 2 options available:
Option 1 is to just log in using your Microsoft account and approve the required permissions.
Option 2 is for advanced users that would like to use their own application registration.

1. Connecting Master Packager Toolbox to your Intune tenant

To be able to upload applications to Intune you must first sign in using an account that has Global Administrator, Cloud Application Administrator, or Application Administrator in your Microsoft Entra tenant. This is required to register a Microsoft Entra application that allows Master Packager Toolbox to communicate with Microsoft Graph API. If you do not have the required permissions, you will receive the following message:
enter image description here

However if your organization has allowed users to request admin approval then you will receive the following message:

enter image description here

If you have the required permissions, you can tick the box and click accept.
enter image description here

This needs to be done only once. When the application is registered you will be able to log in with any user not just the ones with privileges to register a Microsoft Entra application.

2. Connecting Master Packager Toolbox to your Intune tenant

If you would like to have more control over the permissions granted by the application registration. You may follow this guide to register your own application.
enter image description here

Once you have registered your application, open the API permissions section for the application and add the required permissions listed below.

API Permissions Reference

Required Permissions

These permissions are mandatory for Master Packager Toolbox to function:

  • DeviceManagementApps.ReadWrite.All — Read and write Microsoft Intune apps. Without this permission, you will not be able to upload apps.

  • offline_access — Allows the app to see and update the data you gave it access to, even when you are not currently using the app. This does not give the app any additional permissions. Required so that you do not have to sign in each time when opening Master Packager Toolbox.

  • openid — Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.

  • profile — Allows the app to see your users’ basic profile (e.g., name, picture, user name, email address).

Optional Permissions

These permissions enhance functionality but can be skipped:

  • Group.Read.All — Read all groups. Required to assign Intune applications to groups. If skipped, Master Packager Toolbox will not display groups for assignments.

  • Organization.Read.All — Read organization information. Required to display tenant name and tenant logo. If skipped, Master Packager Toolbox will not display the tenant name and logo.

enter image description here

enter image description here
When the permissions have been added go to Authentication and add a redirect URI.
enter image description here

Click on “Add a platform” and select “Mobile and desktop applications”. And then add a custom redirect URI - ms-appx-web://Microsoft.AAD.BrokerPlugin/11111111-1111-1111-1111-111111111111 (replace it with the Application ID from the overview page.)

enter image description here

When you are done creating the application registration you need to open Master Packager Toolbox and apply your Application ID to Master Packager Toolbox. Under the “Upload to Intune” section, click the edit button.
enter image description here
Once you have changed the Application ID you can click connect and log in using your credentials and you are ready to start uploading your package.