Head to http://www.cloudidentity.com/blog/2013/04/16/the-windows-azure-ad-application-model/