So far we have developed a mobile/store native app for Dutch healthcare and successfully deployed that to Windows 8.1 and Windows10 devices. Authentication goes via ADAL and all registered users in our own tenant can get access via the app to the api. Dependent of properties of the logged-in user, they get connected to a licencee and the licencee is related to a certain AzureSQL database. The AzureSQL database for the native app is connected and only available via the api, that's how security of the data is set up.
Now we want to step up and provide the option for third parties (our clients) to access the api as well. They have their users in their own (office365) AzureAD.
What we would like to achieve is some sort of federation with that third party AAD and our AAD, so that users in Federated /trusted third party AAD's can get connected to the api and thus connect to their own AzureSQL database.
In AzureFriday video's by Scott Hanselmann and Vittorio Bertocci (episodes 102-105, see here) we get the impression that this would have to be possible and even quite simple too. Nevertheless: nowhere any documentation or examples can be found so far.
How to accomplish this AAD / AAD federation?
"Every misfortune is a new challenge"