// Add authentication (Azure AD)
services
    .AddAuthentication(sharedOptions =>
    {
        sharedOptions.DefaultScheme = JwtBearerDefaults.AuthenticationScheme;
    })
    .AddJwtBearer(options =>
    {
        var authSettings = Configuration.GetSection("AzureAd").Get<AzureAdOptions>();

        options.Audience = authSettings.ClientId;
        options.Authority = authSettings.Authority;
    });