3ba79ff19a
MS makes a big mess of returning scopes from oauth requests. They only return the custom MS scopes like User.Read and they never return non-MS scopes (like openid, profile, email).