You can Protect an API in Azure API Management using OAuth 2.0 authorization with Azure Active Directory Hope this help!