While requesting the token "management" endpoint is being used in the place of "activeDirectoryResourceId" (It works in Public Azure, as they are same https://management.core.windows.net/)