When the scopes specified in this ask for span several useful resource server, then the Microsoft identity System returns a token for that resource specified in the very first scope. To learn more, see Permissions and consent inside the Microsoft identity platform.InvalidExternalSecurityChallengeConfiguration - Claims sent by external supplier is n