The authorization_code the application asked for. The app can use the authorization code to ask for an entry token for your concentrate on resource. Authorization codes are shorter lived. Generally, they expire soon after about 10 minutes. InvalidExternalSecurityChallengeConfiguration - Promises