Current approach of Authorization of API calls supports users to generate local Controller tokens within the tool.

Application user should be able to generate authorization token through Azure AD and use that to authenticate their API calls instead of generating token locally and storing it for later use within Controller.

This is an important feature from Security perspective where users should avoid storing or using auth tokens stored in the tool to avoid damage done in case of unauthorized access to the stored token. Users should have a way to authorize themselves and generate auth token in Azure AD; later use that token to authorize and execute API calls instead of using locally created tokens or basic auth.