Why Windows Hello for Business, Microsoft Authenticator, and FIDO2 are not a suggestion, but a requirement for your Azure AD powered enterprise – PART 2 – JasonSamuel.com
Securing OAuth Bearer tokens from multiple Identity Providers in an ASP.NET Core API | Software Engineering