TP: If you can ensure that the OAuth application has encoded the display identify with suspicious scopes sent from an not known supply, then a true optimistic is indicated.Advisable action: Assessment the display name, Reply URLs and domains with the app. According to your investigation you'll be able to decide to ban usage of this app. Critique th