This sample ASP.NET MVC web application shows how to use Azure AD for sign-in using the OpenID Connect protocol and access the Graph API using delegated user identity with OAuth 2.0 Authorization Code Grant to implement role based authorization leveraging the well-known [Authorize] attribute and IsInRole() method.