In the event the scopes specified in this ask for span many source server, then the Microsoft identity System returns a token with the source laid out in the first scope. For more info, see Permissions and consent in the Microsoft id platform.InvalidExternalSecurityChallengeConfiguration - Promises despatched by exterior company is just not enough