Can not access Graph API using OpenId Connect access token

Hi,

I use OpenId Connect to authenticate use to my web application (I use Python, pyoidc library).

The authentication is successful, Azure AD return access_token, the web application can retrieve use profile using that access_token. However, when I use that access_token to access Graph API of Azure AD, it returns "Authentication_MissingOrMalformed".

In "permissions to other applications", I configure to allow all permission to "Window Azure Active Directory"

I follow this flow: Web Application to Web API

- http://msdn.microsoft.com/en-us/library/azure/dn499820.aspx#BKMK_Browser

and this API

- http://msdn.microsoft.com/en-us/library/azure/dn151678.aspx

Am I doing it wrong?

Thanks.