Some customers have encountered an issue with a missing API in their Azure Tenant that leads to a problem provisioning the service, receiving Invalid_Client error on first sync.


The following actions are required to fix the Microsoft tenant so the service can be deployed:


Install the Azure PowerShell module


Follow the instructions below :
(also available at https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-5.0.0#install-the-azure-powershell-module)


On a Windows PC, Run PowerShell as administrator


PowerShell will now launch in Administrator mode

Run the following command: 


Install-Module -Name Az -AllowClobber  


PowerShell will take a few moments to install some dependant modules. Approve these installation requests:




Finally run these two commands to login, and install the API endpoints to the tenant:


Connect-AzAccount

New-AzADServicePrincipal -ApplicationId "39624784-6cbe-4a60-afbe-9f46d10fdb27"


If you receive an error you may need to first run   set-executionpolicy remotesigned 


The following should be returned from PowerShell and the issue is resolved: