Verifies your tenant + account OAuth client can do everything the Enablement app
needs, before you register it: mint per-learner tokens, install OneAgent/ActiveGate,
write settings, store training content. Runs live probes — a granted scope is not proof.
Your client secret is used once, in memory, for this check only — never
logged, never stored, never shown to anyone. Every test credential the check creates is
deleted before the page responds. Prefer not to paste a secret into a web page? Run the
same script yourself — identical checks, identical verdict.