title: How do I secure Azure API Management APIs using Azure B2C
body: <p>I’m using web applications secured with Azure Active Directory B2C. Those applications call services using JavaScript hosted by Azure API Management.</p>
  
  <p>I was surprised to read that I can only secure front end APIs using App Keys or client certificate.</p>
  
  <p><a href="https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-create-subscriptions" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-create-subscriptions</a></p>
  
  <p>How can I secure those applications using an Oauth token?</p>