In case the scopes laid out in this ask for span various useful resource server, then the Microsoft id platform returns a token for your useful resource specified in the very first scope. For more info, see Permissions and consent while in the Microsoft id platform.InvalidExternalSecurityChallengeConfiguration - Claims sent by external company isn'