This demo shows how to implement the On Behalf Of flow between an Azure AD protected API and an API protected using OpenIddict.
https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-on-behalf-of-flow
https://documentation.openiddict.com/configuration/application-permissions.html