For ID tokens, this parameter has to be up to date to incorporate the ID token scopes: openid and optionally profile and e-mail. what we??re utilizing the domains for would make a huge difference regarding which one we use.Usage of ' tenant ' tenant is denied. AADSTS500021 indicates that the tenant restriction attribute is configured and which the