Symptoms
APS application 'Microsoft Office 365', id 101, instance [id] -> service 'customer', instance [id]: executing configuration script task fails with:
Application configuration script reported errors: '
error id "validation-error", setting id "Configuration": Method lock_customer calling failed. Reason:The TenantID you have provided is invalid. Check the TenantID and try again.'
Cause
Tenant itself was removed from MS cloud. It could be checked with Get-MsolPartnerContract cmdlet.
Resolution
Set Subscription Disabling Behavior = Disable subscriptions in the Activation Parameters > Global Settings of APS 1.2 Application Resource Type.
In that case lock_customer sets required subscription status in the Endpoint DB instead of checking users existence on the Microsoft side to disable them.