Use web API with implicit flow and client credentials flow We have a .netCore web api protected by OAuth authentication for azureAD.