forbidden-scopeLink to the section forbidden-scope#

https://univip.org/problems/forbidden-scope

Credential lacks the scope, or a proxied request asserts a client other than the session's.

Registered in Part 05 §5.5.2 of the specification.