"Invalid_Client" error during Azure tenant configuration in ADAudit Plus

"Invalid_Client" error during Azure tenant configuration in ADAudit Plus

Issue description   

While configuring the Entra ID (formerly Azure AD) tenant in ManageEngine ADAudit Plus, you may encounter the following error message:
Invalid_Client
This error prevents successful integration of Entra ID with ADAudit Plus and typically relates to incorrect credentials provided during configuration.

Prerequisites   

Before beginning troubleshooting, ensure:

  • You have administrative access to both ADAudit Plus and the Entra ID  portal.

  • You have access to the Entra ID  App Registration used for ADAudit Plus integration.

  • You have permissions to generate and view Client ID and Client Secret in Entra ID.

 Possible causes   

  • The Client ID entered in ADAudit Plus does not match the registered the Entra ID application.
  • The Client Secret provided is incorrect or expired.

  • The wrong value (e.g., “Secret ID” instead of “Value”) was copied during secret generation.

  • The Client Secret was generated earlier and not copied immediately, making it inaccessible.

 Resolution   

 Step 1: Verify the Client ID   

  1. Go to the Entra ID portal.
  2. Navigate to: Entra ID > App registrations > [Your App]

  3. Copy the Application (client) ID from the Overview section.

  4. Ensure this ID is the same one entered in ADAudit Plus > Cloud Directory > Configuration > Cloud Directory.

 Step 2: Verify the Client Secret   

  1. In the same Entra App Registration, go to:
    Certificates & Secrets > Client Secrets

  2. If no active secret exists, click + New client secret.

  3. After creating the secret:

    • Copy the Value, not the Secret ID.

    • Paste the value immediately into ADAudit Plus, as you will not be able to retrieve it later.

Note: If the Value was not copied earlier, generate a new client secret.

 Step 3: Reconfigure the Entra ID  Tenant in ADAudit Plus   

  1. Go to ADAudit Plus > Cloud Directory > Configuration > Cloud Directory.
  2. Enter the correct Client ID and newly generated Client Secret Value.

  3. Save and test the connection.

If entered correctly, the integration should complete without the Invalid_Client error.

 How to reach support 

If the issue persists, contact our support team here.