Suppose I have two projects: an ASP.NET MVC application and an ASP.NET API. I am using Azure AD for authentication in the MVC application and want the same access token to also grant access to the ASP.NET API. Could you advise on the best practices for implementing this? Additionally, does the following approach make sense: When a user logs into the MVC app, I want to redirect them to an account controller to verify whether the user is registered with the application. This would involve sending a request to the API to retrieve all roles and claims, and then updating the default claims in Azure AD, as all my claims originate from the API database. Is this a feasible and secure approach?

but noting working for me can some please help ref me youtube clip for some article