Closing this thread as duplicate of The issuer and subject claim for client_assertion is invalid because the client does not have a client secret.