Should the scopes specified in this ask for span a number of source server, then the Microsoft identity System returns a token for your useful resource specified in the primary scope. To learn more, see Permissions and consent inside the Microsoft identity System. InvalidExternalSecurityChallenge