401 and 403 error when logging into endpoint admin center

We have an on-prem AD with ADD Connect, AD SSO and AD Hybrid joined computers in place. We're currently using SCCM for our MDM solution but would like to dip our toes in the InTune waters.  We can lo...