The authorization_code which the application asked for. The application can utilize the authorization code to ask for an access token for that target source. Authorization codes are quick lived. Commonly, they expire after about 10 minutes. Access to ' tenant ' tenant is denied. AADSTS500