The authorization_code which the application asked for. The application can utilize the authorization code to ask for an access token with the target source. Authorization codes are brief lived. Commonly, they expire after about ten minutes. InvalidExternalSecurityChallengeConfiguration - Promise