If the scopes laid out in this ask for span multiple useful resource server, then the Microsoft id System returns a token with the useful resource laid out in the very first scope. For more info, see Permissions and consent during the Microsoft identification platform. InvalidExternalSecurityChal