I am using Policy Fragments in Azure API Management to make my policies reusable.
One of the policies fragments validates the Authentication token from the request using the validate-azure-ad-token policy.
The fragment looks like this: