Some customers have encountered an issue with a missing API in their Azure Tenant that leads to a problem provisioning the service, receiving Invalid_Client error on first sync.

The following actions are required to fix the Microsoft tenant so the service can be deployed:

Install the Azure PowerShell module

Follow the instructions below :
(also available at

On a Windows PC, Run PowerShell as administrator

PowerShell will now launch in Administrator mode

Run the following command: 

Install-Module -Name Az -AllowClobber  

PowerShell will take a few moments to install some dependant modules. Approve these installation requests:

Finally run these two commands to login, and install the API endpoints to the tenant:


New-AzADServicePrincipal -ApplicationId "39624784-6cbe-4a60-afbe-9f46d10fdb27"

If you receive an error you may need to first run   set-executionpolicy remotesigned 

The following should be returned from PowerShell and the issue is resolved: