Very first do not use ACS App only context and its retired (but not end of life!).
This is a permission issue due to wrong application permissions granted during the app registration. You are providing app access to the Tenant level and hence the app should be registered in the admin center appregnew.aspx page. PFB check sheet for permission xml