We have recently done some R&D in the are of microservices where we wanted to integrate a single service broker handling the security for the different adapters. Here are some of our findings in the area of Azure AD authentication:
https://www.linkedin.com/pulse/calling-new-sharepoint-graph-api-from-your-kiril-iliev
What do you think?