In case the scopes laid out in this request span a number of source server, then the Microsoft identification platform returns a token to the useful resource laid out in the 1st scope. To learn more, see Permissions and consent within the Microsoft id platform.InvalidExternalSecurityChallengeConfiguration - Claims sent by exterior service provider