If the scopes laid out in this request span various resource server, then the Microsoft identity platform returns a token to the source laid out in the 1st scope. To find out more, see Permissions and consent while in the Microsoft identity System.InvalidExternalSecurityChallengeConfiguration - Claims sent by exterior service provider is not plenty