Scenario

In this scenario you are exposing SQL Azure data using OData for SQL Azure service. You are interested to let external system, other than SQL Azure, to manage identities and credentials for the OData service clients.

SQL Azure data exposed via OData for SQL Azure service.
Identities and their credentials should not be managed by SQL Azure.
Clients should request access token from external identity management system.

Solution Approach

ACS is used to solve this scenario. All the configuration is performed using OData for SQL Azure portal portal. No need to access ACS management portal. To access the OData for SQL Azure endpoint clients should first

OData for SQL Azure uses ACS to manage credentials.
Credentials managed using OData for SQL Azure portal.
Clients request SWT access token from ACS passing credentials to it and upon successful validation ACS issues SWT token.
Clients present the SWT token to OData for SQL Azure endpoint