If your scopes laid out in this ask for span a number of resource server, then the Microsoft identification platform returns a token with the source laid out in the primary scope. To find out more, see Permissions and consent in the Microsoft id platform.InvalidExternalSecurityChallengeConfiguration - Statements sent by exterior company is just not