scopes

OAuth scopes for 3LO authentication. The service will always request scope offline_access.