My problem is I don't want to wait hours/days for data to sync from jamf to Intune to stop someone from accessing a resource. Lets toss a real world scenario into play. You have a senior developer leave your Org for a new job. They day they leave, all their access should be cut to all systems. This should be done via a triggered event, or an event based workflow so it happens as soon as it can. You don't want someone with prod access who leaves the Org to have an active account. Someone's system gets compromised, and your EDR/DLP/whatever-security-tool detects it, and now you need to quarantine that system and probably that account to mitigate all risks. Now lets take into account all OS and third party app patching, you want to access a captive portal or some app via SAML/SSO, and you are using a known vulnerable web browser, how do we make sure we stop you from doing so?
HR software solutions can take care of the off boarding stuff and they can ship events, or at least the few I know of can. What I don't want is something to trigger an event to cut off conditional access, and it then take hours to days to sync to kick in. I am not sure this tool exists yet either, but I am highly interested in it
