If you havent excluded from the clone process, profiles, users, multi sso settings, OAuth settings - then you'll have to create these again (check the ones for IDP - guess AAD is your IDP using OAUth2 -> if so check your application profiles/ID/secret key. Most likely it's of overwrittent settings).
BTW - you mean test/QA instance, right? I doubt you cloned from dev/test to prod.
