If your scopes specified in this request span many resource server, then the Microsoft identification System returns a token for the source laid out in the very first scope. For more info, see Permissions and consent inside the Microsoft identification System.The consumer must mail the user back into the /authorize endpoint with the correct scope t