I am implementing an OAuth2 provider for OWIN and Azure Active Director. FWIW, at this time the OpenId Connect option doesn\'t fit the requirements for this work.
I
I had the same problem, i just wanted to implement a user-login.
After trying 1000 things (with this post amongst others) i found out that i can use the Microsoft.Azure.ActiveDirectory-id as resource paramter. On this way i don't have to create an second app.
http://blogs.msdn.com/b/besidethepoint/archive/2012/10/23/getting-started-with-azure-active-directory.aspx
nameValuePairs.add(new BasicNameValuePair("resource", "00000002-0000-0000-c000-000000000000"));
and got the token
UPDATE:
the azure support suggested me to use https://graph.windows.net/ :
nameValuePairs.add(new BasicNameValuePair("resource", "https://graph.windows.net/"));