Nevertheless, you will find occurrences where by scp is just not present while in the token. You'll want to check for the absence of your scp claim for the following eventualities:For instance, by only examining the tenant ID along with the presence of the oid claim, your API could inadvertently authorize all provider principals in that ten… Read More