Unable to Deploy Add-in in Admin Center After Adding SSO Code

Question

I created a Word add-in that requires SSO for necessary permissions. When I tested it in Word online, I successfully added my manifest without errors, and the functions worked correctly.

However, upon uploading my manifest file to the Microsoft 365 Admin Center for centralized deployment of add-ins, I encountered an error: 'There was an error while giving the admin consent. Please try refreshing the add-in from it's details page.' After removing the SSO part from my manifest file, I was able to upload it successfully.

I suspect that I may have misconfigured my Azure AD settings. Could you please assist me in identifying where I went wrong?

This is my manifest file sso configuration (with my application id):

I have all necessary permission granted:  I also set up my Web URIs and my custom scope (with my application id):

I have my add-in url added in the Web Redirect URIs.