I was trying to work through the "WhoAmI" example under QuickStart and was getting the same error. The solution from racod with respect to adding a scope when requesting the bearer token fixed it for me. For anyone else trying to follow the Quickstart, I added the "grant_type" and "scope" as body keys under "x-www-form-urlencoded" in Postman.
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.