The user needs to be able to configure the scopes that are returned for a protected resource in the metadata.
The user needs to be able to configure the scopes that are returned for a protected resource in the metadata.