The OAuth scopes to request from the external identity provider. These determine what information and permissions are requested from the user.