The authorization_code the app asked for. The app can make use of the authorization code to request an accessibility token for that target source. Authorization codes are quick lived. Typically, they expire right after about ten minutes.InvalidExternalSecurityChallengeConfiguration - Promises sent by external service provider is just not sufficient