MHow do you try to call the primary domain?
MYou need to call zitadel with an auth request that contains a reserved scope.
MIt's actually one of the most common questions, so we're releasing a playground to craft the right auth request - would you like to give it a shot? Else I can walk you though it as well in the chat 