If your scopes specified in this request span several resource server, then the Microsoft id platform returns a token for your source laid out in the main scope. For more info, see Permissions and consent within the Microsoft identification platform.InvalidExternalSecurityChallengeConfiguration - Statements sent by exterior provider is not adequate