diff --git a/.claude/skills/remediation-tool/scripts/get-token.sh b/.claude/skills/remediation-tool/scripts/get-token.sh
index 6c4bf64..8f6f206 100755
--- a/.claude/skills/remediation-tool/scripts/get-token.sh
+++ b/.claude/skills/remediation-tool/scripts/get-token.sh
@@ -64,9 +64,14 @@ case "$TIER" in
     VAULT_PATH="msp-tools/computerguru-defender-addon.sops.yaml"
     SCOPE_URL="https://api.securitycenter.microsoft.com/.default"
     ;;
+  intune-manager)
+    CLIENT_ID="46986910-aa47-4e5e-b596-f65c6b485abb"
+    VAULT_PATH="msp-tools/computerguru-intune-manager.sops.yaml"
+    SCOPE_URL="https://graph.microsoft.com/.default"
+    ;;
   *)
     echo "ERROR: unknown tier '$TIER'." >&2
-    echo "Valid tiers: investigator | investigator-exo | exchange-op | user-manager | tenant-admin | tenant-admin-onboard | defender" >&2
+    echo "Valid tiers: investigator | investigator-exo | exchange-op | user-manager | tenant-admin | tenant-admin-onboard | defender | intune-manager" >&2
     exit 2
     ;;
 esac