title: ClaimsPrincipal obtained through ISecurityTokenValidator.ValidateToken is changing name of SCP claim
body: <p>I'm currently working with Azure Active Directory access tokens and .NET Core 3.1. The access tokens I request produce the following claim:</p>
  
  <pre><code>{
  ...
  "scp": "MyScope.Create MyScope.Search"
  ...
  }
  </code></pre>
  
  <p>However, after running the verification of the access token, the name of the claim "scp" changes to "<a href="http://schemas.microsoft.com/identity/claims/scope" rel="nofollow noreferrer">http://schemas.microsoft.com/identity/claims/scope</a>"</p>
  
  <pre class="lang-cs prettyprint-override"><code>SecurityToken securityToken;
  ClaimsPrincipal claimsPrincipal = tokenValidator.ValidateToken(accessToken, myValidationParameters, out securityToken);
  return claimsPrincipal;
  </code></pre>
  
  <p>Also, as you can see in the image, not all claims are changed, some stay as they were created like aud or iss, but scp changes to "<a href="http://schemas.microsoft" rel="nofollow noreferrer">http://schemas.microsoft</a>..." (like if this was a v1 token, but it is v2)</p>
  
  <p>Is this something expected, or is there something I should be configuring so the claims stay as the should be.</p>
  
  <p><a href="https://i.stack.imgur.com/FWHeR.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/FWHeR.png" alt="claims after validation"></a></p>
  
  <p>Thanks!</p>