title: Azure AD Authentication Pass user details from client to API
body: <p>I have a .net core web application which is secured with Azure AD using Security groups to lock down access to certain controllers, Ill refer to this as the client.</p>
  
  <p>The client communicates with an API which needs to be secured, all of the documentation I have seen talks about using azure AD to secure the API but from what I understand this means that the API will verify that the client is authorized to use it NOT that the user who is authenticated into the client.</p>
  
  <p>Ideally, we want to be able to have the API secured so that different security groups have access to different endpoints.</p>
  
  <p>tldr; A user authenticates to a client the client communicates with an API, we need the users details to be passed to the API.</p>
  
  <p>If someone could point me in the right direction this would be great.</p>