SCIM Bridge - Google Workspace - Unable to fetch groups

I've deployed the SCIM bridge in Docker, and followed all the directions to connect to our Google Workspace. The bridge does appear to connect fine, but is unable to fetch groups :/

Any advice?

I see the following in the logs:

{"level":"error","version":"2.6.2","build":"206022","application":"op-scim","request_id":"cdv31vrvd1655ljto8s0","error":"Server: (failed to ConstructGroupsCache), Wrapped: (failed to GetAllGroups), Get \"https://admin.googleapis.com/admin/directory/v1/groups?alt=json&customer=my_customer&orderBy=email&pageToken=&prettyPrint=false\": oauth2: cannot fetch token: 401 Unauthorized\nResponse: {\n  \"error\": \"unauthorized_client\",\n  \"error_description\": \"Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.\"\n}","time":"2022-11-23T14:41:03Z","message":"cannot construct cache: internal error"}

but I double-checked the OAuth Scopes and they look correct to me:

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser:_ Not Provided