我认为您应该考虑将OAuth 2.0协议与Azure Active Directory(AzureAD)结合使用.本文档可以帮助您入门. 

I think you should consider using the OAuth 2.0 protocol with Azure Active Directory (AzureAD).  This document can help you get started with that. 

https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/api-management/api-management-howto-protect-backend-with-aad.md

https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/api-management/api-management-howto-protect-backend-with-aad.md

我希望这会有所帮助，

谢谢