I’ve recently been exploring multi-tenant application migration/integration, and have stumbled into the following error a couple of times.

AADSTS650052: The app is trying to access a service ‘2d4d3d8e-2be3-4bef-9f87-7875a61c29de’ (OneNote)
that your organization ‘TenantGUID’ lacks a service principal for. Contact your IT Admin to review the configuration of your service subscriptions or consent to the application in order to create the required service principal.

It turns out, that after logging into the OneNote desktop application as a Global Administrator, the problem has gone away. I assume there needed to be a first logon in the new tenant for the service principal to actually be created.