The authorization_code that the app asked for. The application can utilize the authorization code to ask for an obtain token for the goal resource. Authorization codes are quick lived. Generally, they expire just after about 10 minutes.InvalidExternalSecurityChallengeConfiguration - Claims sent by external supplier just isn't sufficient or Missing