title: How can you reuse a ServicePrincipal across Azure AD and MSol?
body: <p>I have a multitenant read only app registered in Azure AD that provides access to read Azure resources as a ServicePrincipal granted the "Reader" role and perms for "Read Directory Data". One aspect I want to grab is if MFA is enabled for an admin, which I can only get when using <code>Get-MsolUser</code>.... <code>GetAzureADUser</code> doesn't seem to hold the right information.</p>
  
  <p>I need to therefore use this ServicePrincipal when calling <code>Connect-MsolService</code>... which will always fail with "Authentication Error: Bad username or password."</p>
  
  <p>Now I know I could create a new ServicePrincipal specifically for Msol using <code>New-MsolServicePrincipal</code>, but I was wondering if there is some way to reuse the ServicePrincipal already registered in Azure AD for my app so I can ultimately call <code>Get-MsolUser</code> in that context? I would like to reduce the number of accounts/creds left in the customer's tenant, and if I can avoid creating multiple ServicePrincipals just to accomplish this one query, it would be better.</p>