If your scopes laid out in this ask for span many resource server, then the Microsoft identity platform returns a token with the resource specified in the 1st scope. For more info, see Permissions and consent inside the Microsoft id platform. Not like most of the top rated domain title registrars