title: Token is generating with all the available scopes in AzureAD
body: <p>I have below setup on Azure,</p>
  <ol>
  <li>Host APP
  <ul>
  <li>Added 3 Scopes under &quot;Expose an API&quot; tab i.e. abc, def, ghi</li>
  </ul>
  </li>
  <li>Client APP
  <ul>
  <li>Added all 3 Scopes under &quot;API Permissions&quot; tab</li>
  </ul>
  </li>
  </ol>
  <p>Now if I request the token from Postman for Client APP with specific scope(s) and I decode the token over JWT.IO then I all 3 scopes available in &quot;scp&quot; claim.</p>
  <p>POSTMAN Setup for OAuth 2.0,</p>
  <p><a href="https://i.stack.imgur.com/Xm0RX.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Xm0RX.png" alt="enter image description here" /></a></p>
  <p><strong>My expectation here is to implement scope based authorization where If I request the token for abc scope then only ABC should present in token.</strong></p>