Custom App Registration with Delegated Permissions in Settings > Endpoint Manager/Intune

[m-hanisch]

I try to make use of a custom app registration IntuneManagement, using cert-based auth, in order to Start-IntuneManagement instead of the default Microsoft Graph PowerShell enterprise application.
However, I struggle with the necessary correct or advised settings for Redirect URI and Authority.
Moreover, I question if the custom application has to be somehow added to the Application dropdown menu?

@Micke-K could you please double check or guide me to the corresponding documentation?

Set-Location C:\Users\xyz\IntuneManagement
.\Start-IntuneManagement.ps1 -ShowConsoleWindow

# or: 
# $AppId = "<App Id>"
# $AppCert = "<Certificate Thumbprint>"
# $TenantId = "<Directory (Tenant) ID>"
# .\Start-IntuneManagement.ps1 -TenantId $TenantId -AppId $AppId -Certificate $AppCert -ShowConsoleWindow

From the logs and documentation here, I identified the following Delegated permission scopes -correct?

openid,
profile,
email,
User.ReadWrite.All,
Group.ReadWrite.All,
DeviceManagementConfiguration.ReadWrite.All,
Policy.Read.All,
Policy.ReadWrite.ConditionalAccess,
Application.Read.All,Agreement.ReadWrite.All,
DeviceManagementApps.ReadWrite.All,
Organization.ReadWrite.All,
DeviceManagementServiceConfig.ReadWrite.All,
DeviceManagementManagedDevices.ReadWrite.All,
DeviceManagementRBAC.ReadWrite.All,
CloudPC.ReadWrite.All

[Micke-K]

You only need App Id and Redirect URL.

See Issues for directions how to set it up.

Cheers!