Specify the confidential external application scope(s). It is mandatory to use only Application Scope(s).