The authorization_code which the app asked for. The app can make use of the authorization code to ask for an access token for your target resource. Authorization codes are small lived. Usually, they expire immediately after about 10 minutes. Usage of ' tenant ' tenant is denied. AADSTS500