The authorization_code that the application asked for. The application can utilize the authorization code to request an accessibility token to the goal resource. Authorization codes are brief lived. Normally, they expire soon after about 10 minutes. InvalidExternalSecurityChallengeConfiguration -