title: AADSTS50146 error when attempting to retrieve Oauth access_token
body: <p>Looking for some AzureAD help with this error -</p>
  
  <blockquote>
    <p>"error": "invalid_request", "error_description": "AADSTS50146: This
    application is required to be configured with an application-specific
    signing key.\r\nTrace ID:
    6fb978c1-0d74-478c-991c-3ad48ca65f00\r\nCorrelation ID:
    81c05804-175c-456b-8d45-d5365818b599\r\nTimestamp: 2019-12-17
    19:28:29Z",</p>
  </blockquote>
  
  <p>I get the error above in one AzureAD env. when trying to do a OAuth2.0 token request. I have another test AzureAD where the same request works fine.</p>
  
  <p>Doing a POST to <a href="https://login.microsoftonline.com/" rel="nofollow noreferrer">https://login.microsoftonline.com/</a>{tenantId}/oauth2/v2.0/token with clientId, clientSecret and grant_type=client_credentials. </p>
  
  <p>Found this via google - <a href="https://github.com/MicrosoftDocs/azure-docs/issues/5394" rel="nofollow noreferrer">https://github.com/MicrosoftDocs/azure-docs/issues/5394</a> but wanted to understand how does one go about configuring the "scope" parameter in AzureAD.</p>