In case the scopes specified in this ask for span various source server, then the Microsoft identification System returns a token for the source specified in the primary scope. To learn more, see Permissions and consent within the Microsoft id platform.InvalidExternalSecurityChallengeConfiguration - Statements sent by exterior service provider just