If you every encounter the following error, then we have a suggestion for you.

{"error":"access_denied","error_description":"The client is not authorized to perform this action","debug":"Invalid ID Token: {\"iss\":\"Iss is invalid\"}"}

Most likely the Issue Identifier in the MIC configuration is not set correctly.  Please see the following link for instructions on how to construct the correct issue identifier for your tenant.