We're looking at leveraging the new User Enrollment feature of iOS 13 and are having a tough time connecting our on-prem MobiControl instance to our Azure AD. We have followed the instructions here (https://www.soti.net/mc/help/v14.0/en/console/system/ldap/azure_authenticate_mc.html) but are confused about number 3 ("Configure permissions for the application"). In Azure, we have granted "Directory.Read.All" permissions for the app and we are fairly certain we have entered everything correctly but we cannot get it to work. When searching the directory (through the Security tab), we get "The server could not complete your request. An internal error occurred."
In the ManagementService logs it looks like it is failing while trying to acquire a token. Has anyone had similar issues? We have already synced to AD using a traditional LDAP connection, but we would like to figure out how to connect to Azure as well.
