Config Manager CMG "Failed to Create Client App"

Question

Hi,

It looks like I am falling over on the first hurdle of trying to setup a CMG.

I have setup a PAYG Azure Tenancy and when I go to Config Manager > Azure Services > Configure Azure Services and when I get to the point of creating the Web app and sign in to my Azure account I get the error "Failed to Create Client App".

In the SmsAdminUILog I can see this but not sure what it means because I am global admin on the tenancy:

Not sure if you will be able to see the screenshot so in plain text:

at Microsoft.ConfigurationManagement.AdminConsole.CloudServicesManagement.AAD.AADDataHandler.RetrieveTenantDetailsFromAzureLoginCredentials()\r\n
[1, PID:3280][05/28/2021 09:19:01] :System.InvalidOperationException\r\nFailed to sign in to Azure.The remote server returned an error: (403) Forbidden.\r\n at Microsoft.ConfigurationManagement.AdminConsole.CloudServicesManagement.AAD.AADDataHandler.RetrieveTenantDetailsFromAzureLoginCredentials()
at Microsoft.ConfigurationManagement.AdminConsole.CloudServicesManagement.Dialogs.AADAppDetailsDialog.SignIn_OnClick(Object sender, EventArgs e)\r\n

When I create the web and client apps manually in the tenancy they import OK but when going onto the next step of Creating the CMG I get the error "A valid Azure AD app is required".

Any help would be appreciated, the tenancy is in a vanilla state nothing has been changed apart from creating a deleting the apps.

Answer 1

Hi,

Thanks for posting in Microsoft MECM Q&A forum.

==>“A valid Azure AD App is required. Please Deploy the Azure Service for Cloud Management First.”
Please try to first add the “Cloud Management” service in Azure Services. For more detailed steps, please refer to below guide:
Guide to Setup SCCM Cloud Management Gateway (SCCM CMG) – Easy and Detailed

Best regards,
Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
https://learn.microsoft.com/en-us/answers/articles/67444/email-notifications.html

Answer 2

Hi,

This is the issue we are having for some reason we cannot add the Azure service in Config Manager, when looking at the AdminUI log it just says failed to sign into Azure. We have checked firewalls and proxy and nothing is getting blocked, not sure if there is something else we need to check?

Thanks.