Based on dexidp/dex#4046, you have changed the required Microsoft delegations from Directory.Read.All to GroupMember.Read.All. Yet the documentation does not reflect that. Please add the correct app registration requirements to implement group-based Microsoft Entra login correctly! Thank you!