Check the syntax of your OIDC_ISSUER value.. IIRC TFA is very fussy.. try both with and without a trailing slash too
OIDC_ISSUER
