diff --git a/config/config.msft.yaml b/config/config.msft.yaml
index e8f230b0d..07197d9e5 100644
--- a/config/config.msft.yaml
+++ b/config/config.msft.yaml
@@ -32,6 +32,7 @@ defaults:
 
   # MGMT cluster specifics
   mgmt:
+    clusterServicePrincipalId: 'todo'
     subscription: hcp-{{ .ctx.region }}
     rg: hcp-underlay-{{ .ctx.region }}-mgmt-{{ .ctx.stamp }}
     etcd:
diff --git a/config/public-cloud-msft-int.json b/config/public-cloud-msft-int.json
index 534e7ad5b..e440c5e10 100644
--- a/config/public-cloud-msft-int.json
+++ b/config/public-cloud-msft-int.json
@@ -75,6 +75,7 @@
     "restrictIstioIngress": true
   },
   "mgmt": {
+    "clusterServicePrincipalId": "todo",
     "etcd": {
       "kvName": "arohcp-etcd-int-1",
       "kvSoftDelete": true