Issue with AzureAD SSO Configuration for NetBox

[JSpringham]

I am trying to implement Azure AD SSO for NetBox following this guide: https://docs.netbox.dev/en/stable/administration/authentication/microsoft-azure-ad/

All seems to work fine, until I complete my AAD login and am presented with this error:

<class 'social_core.exceptions.AuthForbidden'>
Your credentials aren't allowed
Python version: 3.8.10
NetBox version: 3.1.8

I have completed the configuration.py to the following (KEY and SECRET removed). I've seen others with the same issue had some success by removing the {} from the KEY and SECRET values, but I haven't put these in to begin with.
However, I do get the same error if I DO put them in.

Remote authentication support

REMOTE_AUTH_ENABLED = True
REMOTE_AUTH_BACKEND = 'social_core.backends.azuread.AzureADOAuth2'
SOCIAL_AUTH_AZUREAD_OAUTH2_KEY = 'XXXX-XXXX'
SOCIAL_AUTH_AZUREAD_OATH2_SECRET = 'XXXXXXXX'
SOCIAL_AUTH_REDIRECT_IS_HTTPS = True
REMOTE_AUTH_AUTO_CREATE_USER = True
REMOTE_AUTH_DEFAULT_GROUPS = []
REMOTE_AUTH_DEFAULT_PERMISSIONS = {}

Is there anything else I am missing here?

TIA!