I have an 403 error trying to use microsoft azure OIDC with my kubeflow application

Question

I am setting up kubeflow to have my authentication and authorization through azure active directory and completely avoid dex
I have edited the oidc-authservice-parameters config map as follows;

apiVersion: v1
kind: ConfigMap
metadata:
  name: oidc-authservice-parameters
  namespace: istio-system
data:
  AUTHSERVICE_URL_PREFIX: https://<my domain>/authservice/
  OIDC_REDIRECT_URI: https://<my domain>/authservice/oidc/callback
  OIDC_AUTH_URL: https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/authorize
  OIDC_PROVIDER: https://login.microsoftonline.com/<tenant-id>/v2.0
  OIDC_SCOPES: profile email
  STORE_PATH: /var/lib/authservice/data.db
  SKIP_AUTH_URLS: ""
  CLIENT_ID: <client_id>
  APPLICATION_SECRET: <client secret>
  USERID_CLAIM: email
  USERID_HEADER: kubeflow-userid
  USERID_PREFIX: ""

this is my dex config map, though i dont actaully need it as i am completely going through AAD for OIDC

apiVersion: v1
kind: ConfigMap
metadata:
  name: dex
  namespace: auth
data:
  config.yaml: |
    issuer: https://login.microsoftonline.com/<tenant_id>/v2.0
    storage:
      type: kubernetes
      config:
        inCluster: true
    web:
      http: 0.0.0.0:5556
    logger:
      level: "debug"
      format: text
    oauth2:
      skipApprovalScreen: true
    staticClients:
    - idEnv: OIDC_CLIENT_ID
      redirectURIs: ["/login/oidc"]
      name: 'Dex Login Application'
      secretEnv: OIDC_CLIENT_SECRET
    connectors:
    - type: microsoft
      id: microsoft
      name: Microsoft
      config:
        clientID: <client id>
        clientSecret: <client secret>
        redirectURI: https://<my domain>/authservice/oidc/callback
        scopes:
        - profile
        - email

On azure, i have registered an app and set the redirect_uri to https:///authservice/oidc/callback and given a api permission of openid, email and profile, user.read(default).

when i go to .com it takes me to microsoft login page, i log in successfully but after the login session i get a 403 error page

How can i resolve this....It is not directing me to my kubeflow application.