https://scomnewbie.github.io//posts/protectbackendapi/
Play with multitier AAD applications - SCOMnewbie learnings