TEAM: Huntress Managed Identity Threat Detection and Response (ITDR, formerly MDR for Microsoft 365)
ENVIRONMENT:Microsoft Azure Portal
SUMMARY: This provides troubleshooting steps to address the subscription_error listed above.
For manually mapped tenants
Please approve the app using https://login.microsoftonline.com/common/adminconsent?client_id=3a8b631c-cbce-4c51-a5af-1d3bc0a14d69 with a different global admin other than the Huntress one, then delete the integration and re-map.
For CSP Tenants
For CSP tenants (not manually mapped), this error means one of two things: AADSTS65001 or AADSTS50020. Please follow the guides for each and then wait up to 24 hours for data to start flowing.