Check this documentation as well when trying out the same scenario in IS 5.11.0 version

https://is.docs.wso2.com/en/latest/learn/configuring-access-control-policy-for-a-service-provider