In the sample, an existing web app with its own way of signing in users adds the ability to call an Azure AD protected web API using OAuth 2.0 access tokens. - View it on GitHub