The curl from checkmk server gives this. I’m using the correct app secret value, if I wasn’t other connections in checkmk would break for that subscription.
Well no technically the solution was to create a new secret value, even though there were two other values already there and I was definitely using one of the previous ones (if I wasn’t the azure subscription would have failed).