I’m currently engaged in a project that involves deploying an Angular frontend and five .NET 8 microservices, each backed by Azure SQL (PaaS). These components are secured through Azure AD, with bearer tokens facilitating secure communications. Our deployment strategy requires the microservices to be hosted across three geographic regions (AMERICAS, EUROPE, and ASIAPACIFIC), while the frontend will only be deployed in EUROPE.
To manage authentication across these distributed components, we plan to use Microsoft EntraID with separate registrations for the APIs in each region, and one for the frontend. We are considering the implementation of MSAL v3 to handle the authentication flows.
I am looking for insights on the best architectural practices to implement this setup effectively.