SAML Token valid, but getting 403 Error when signed in

[zachk-Syrahealth]

I am looking at deploying GLPI/PHPSAML for our org, and have configured the SAML tokens in both Azure AD and the admin interface correctly.
However upon login after successful routing through azure, i get redirected to a 403 error

Access to {SITE} was denied
You don't have the user rights to view this page.
HTTP ERROR 403

[zachk-Syrahealth]

I have attempted to add inherited access to the directory /glpi/plugins/phpsaml/ to test but it does not change the result, as well as changing the ownership files to the directory similar to the initial install of glpi

[DonutsNL]

make sure access to the front/acs.php is not restricted by the webserver or .htaccess configuration and the redirect url is configured correctly in the idp.