Some customers have encountered an issue with a missing API in their Azure Tenant that leads to a problem provisioning the service, receiving Invalid_Client error on first sync.
The following actions are required to fix the Microsoft tenant so the service can be deployed:
Install the Azure PowerShell module
Follow the instructions below :
(also available at https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-5.0.0#install-the-azure-powershell-module)
On a Windows PC, Run PowerShell as administrator
PowerShell will now launch in Administrator mode
Run the following command:
Install-Module -Name Az -AllowClobber
PowerShell will take a few moments to install some dependant modules. Approve these installation requests:

Finally run these two commands to login, and install the API endpoints to the tenant:
Connect-AzAccount
New-AzADServicePrincipal -ApplicationId "39624784-6cbe-4a60-afbe-9f46d10fdb27"
If you receive an error you may need to first run set-executionpolicy remotesigned
The following should be returned from PowerShell and the issue is resolved: