Azurerm backend seems not to like tenant_id

I wonder if anyone else has seen a condition where running with Service Princpal (login within powershell with az works fine) throws an error with 'tenant_id is not a valid DNS name or external domain" error?

I’ve got the standard exports set for environment variables and using them in a CLI mode works fine to login with powershell but terraform init fails.