If your scopes specified in this ask for span many source server, then the Microsoft identity System returns a token for that resource specified in the very first scope. For more information, see Permissions and consent inside the Microsoft identity platform.InvalidExternalSecurityChallengeConfiguration - Promises despatched by exterior provider is