If the scopes laid out in this request span various useful resource server, then the Microsoft identity System returns a token with the source laid out in the initial scope. For more information, see Permissions and consent inside the Microsoft id System.InvalidExternalSecurityChallengeConfiguration - Promises despatched by external provider is not