Windows Azure Pack - Subscription Active (Out Of Sync) (Again)...

Recently been playing around with Azure Pack in my lab and came across the issue of assigned subscriptions appearing as Active (Out of Sync). As we are way past UR1, my previous post is not valid in this case (https://blogs.technet.com/b/virtual-mite/archive/2014/03/21/windows-azure-pack-subscription-active-out-of-sync.aspx).

So here's my symptoms:

Problem: When adding a new subscription to a new user the status of that subscription appears Active (Out of Sync).

Noted Event Errors:

Event ID 262 - MgmtSVC-AdminAPI/Operational (Example: "Job 'fdce0927-9137-4346-8616-999aa8a8b962' failed: System.Exception: Tenant for subscription cf02b3f9-1598-41bb-8b61-5f4f039221c0 does not exist.")
Event ID 204 - MgmtSVC-AdminAPI/Operational (Example: "Resource provider unexpected exception for fanout request with verb 'POST', operation name 'Fanout', request URI 'https://localhost:8090/provider/subscriptions',  version '', client request Id '', server request Id '', status code 'InternalServerError', reason 'Internal Server Error', body 'Failed to create subscription. Reason: Message : An error occurred while processing this request., InnerMessage: <?xml version="1.0" encoding="utf-8"?>")

Another symptom of this issue is, when you create and assign the new user to the subscription the account is not created in VMM, under Settings/Security/User Roles.

Working through the symptoms I narrowed it down to being an issue with SPF (Service Provider Foundation) communicating to VMM. I checked the localspf user permissions and all appears fine.

Looking in IIS, I checked over the SPF site. The Binding appeared fine...but when looking at the account used to run the Provider, it appeared as Network Service (obviously over-looked during setup!). Changing this "Identity" to a domain account and after hitting "Recycle" on the Provider I was able to successfully create a new user and assign a subscription. Which resulted in the new account appearing in VMM.

IIS Manager -> Application Pools:

Useful Azure Pack setup blog: https://blogs.technet.com/b/privatecloud/archive/2013/12/06/windows-azure-pack-installing-amp-configuring-series.aspx