Sync failure reported on Enforce under - Manage->Application Detection-> Configuration:
CloudSOC DLP Integration
The application detection configuration for SharePoint is present in Enforce, but the O365 Securlet in CloudSOC does not have the SharePoint scanning enabled.
Removing the SharePoint application detection configuration resolved the issue.
In some cases, the additional step of de-activating the CDS entry in the CloudSOC may be required. For steps on doing that, see Your Application Detection configurations are showing sync failure status (broadcom.com).