Here is the actual line you need to add to the scope:
offline_access%20openid%20email%20profile
A basic scope example:
"openid+https%3A%2F%2Foutlook.office.com%2Fmail.read+https%3A%2F%2Foutlook.office.com%2Fcalendars.read+offline_access%20openid%20email%20profile"
source
share