I'm sorry. I changed the default AuthorizationEndpoint on *AppHttpApiHostModule,cs to "https://login.microsoftonline.com/common/oauth2/v2.0/authorize" for a multitenant app