title: Suggest OAuth flow(grant type) or approach for below requirement
body: <p>CompanyA is integrating with CompanyB where CompanyA's users will be buying devices of CompanyB.</p>
  
  <p>CompanyA wants to show user's device(CompanyB) details on their app by calling </p>
  
  <p>CompanyB's API on each user login.</p>
  
  <p>CompanyA user is authenticated on CompanyA IAM.</p>
  
  <p>CompanyA has to call register device when user tries to add an device first time.</p>
  
  <p>Help me to identify the flow which i can use to query particular loggedin user's device only.</p>
  
  <p>Do i need to create duplicate user account on CompanyB's IAM?</p>
  
  <p>If i use client credential flow for API to API call, access token given by CompanyB is only provides access for API calls but it does not tell that on behalf of correct user only call is invoked.</p>
  
  <p>Assume that CompanyA uses IdentityServer or any other provider as IAM and CompanyB uses Azure AD B2C.</p>
  
  <p>Any other approach?</p>
  
  <p>Please see below diagram,</p>
  
  <p><a href="https://i.stack.imgur.com/WbQ1J.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/WbQ1J.png" alt="CompanyA and CompanyB interaction"></a></p>