If using policy based authentication, the first call to .net core API is forbidden

Question

I created a simple API with .NET 5.0 with a single controller action. This action is protected with a policy:

[ApiController]
public class EnterpriseControlle