For ID tokens, this parameter should be current to include the ID token scopes: openid and optionally profile and e-mail. what we??re using the domains for would make a huge variation as to which one we use. MisconfiguredApplication - The app demanded resource accessibility record isn't going