Affintra detects incorrect Intune Primary User assignments with a confidence-scoring model — Dominance, Margin, Consistency, Recency — and safely writes the fix back to Intune.
Whoever enrolled the device became its Primary User — the intern, the technician, the previous owner. Every downstream process trusts that field: self-service, licensing, compliance, security response. When it's wrong, everything built on it is wrong.
Four steps. No agents, no scripts, no CSV archaeology.
{{ s.body }}
Every device gets a confidence score built from four weighted signals over real sign-in behavior. Below your threshold, Affintra flags. Above it, Affintra can fix.
You control the weights and the auto-fix threshold per tenant.
Dry-run first, always. Corrections go through review queues, per-tenant thresholds, batched Graph writes with rollback — and a full audit log of who changed what, when, and why.
One console, all your tenants. Per-tenant weights, thresholds, and RBAC — built for MSPs and enterprise IT.
Every verdict shows its evidence: sign-in counts, competing users, time windows. No black box.
Devices change hands. Affintra keeps watching sign-ins and re-scores continuously, so ownership never rots again.
Scores, verdicts, and remediation as REST endpoints. Wire it into your ITSM, your dashboards, your automations.
This is what remediation feels like: review the evidence, approve, done. Intune is updated via Microsoft Graph, and the change is logged.
Reads sign-in logs from Entra ID, device inventory from Intune, and writes corrections through Microsoft Graph. Nothing to install on devices.
Scoped Graph permissions, read-only by default, EU data residency, and encryption in transit and at rest. Write access is opt-in per tenant.
The manual way vs. Affintra.
We ran Affintra in dry-run mode on a Friday. By Monday we had 1,400 verified corrections queued — work that used to take a quarter.
Pull verdicts into your ITSM, trigger remediation from your own tooling, or subscribe to drift events via webhooks.
Read the docs →Example pricing — final tiers TBD.
{{ p.tagline }}
No agents. No scripts. One admin consent.