Authentication unsuccessful as a result of flow token expired. Envisioned - auth codes, refresh tokens, and sessions expire after a while or are revoked by the consumer or an admin. The application will ask for a whole new login through the consumer.InvalidExternalSecurityChallengeConfiguration - Claims despatched by external supplier isn't enough