The screenshot shows the Configure application APIs that need to be OAuth protected dialog, where you can access the Primary audience and scope.