Consent dialog isn't displaying

[AaronSiebersma]

I'm trying to authenticate against an Azure app registration with "Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)" selected in a Blazor WASM application. This works when signing in with a personal Microsoft account, but fails to display a consent dialog for a Microsoft account in another organization.

Specifically, the application displays the error:

There was an error trying to log you in: ''

In the URL, I get an error message similar to the following in the message parameter:

AADSTS650052: The app is trying to access a service '8e506345-XXXX-XXXX-XXXX-XXXXXXXXXXXX'(umos_intranet_api_dev) that your organization 'c6b0727d-XXXX-XXXX-XXXX-XXXXXXXXXXXX' lacks a service principal for. Contact your IT Admin to review the configuration of your service subscriptions or consent to the application in order to create the required service principal.
Trace ID: 46b31296-9c0c-444d-9b3f-ec864b18d402
Correlation ID: d664496f-fe0c-4500-96b4-89cf5b931c49
Timestamp: 2022-12-27 14:31:26Z

Permissions for the app registration are as follows:

My appsettings.json is:

I've got the following in my program.cs:

builder.Services.AddMsalAuthentication(options =>
{
    builder.Configuration.Bind("UmosBlazor:AzureAd", options.ProviderOptions.Authentication);

    options.ProviderOptions.DefaultAccessTokenScopes.Add(
        builder.Configuration.GetValue<String>("UmosBlazor:APIClientId")
    );
    options.ProviderOptions.DefaultAccessTokenScopes.Add("https://graph.microsoft.com/User.Read");

    options.ProviderOptions.AdditionalScopesToConsent.Add("https://graph.microsoft.com/User.Read");
    options.ProviderOptions.AdditionalScopesToConsent.Add("api://" + builder.Configuration.GetValue<String>("UmosBlazor:APIClientId"));

    //Reconfigure name claim to return the username/email address.
    //This is for calls to User.Identity.Name.
    options.UserOptions.NameClaim = "preferred_username";

    options.ProviderOptions.LoginMode = "redirect";
})