I\'m trying to authenticate with Dynamics CRM 2016 Online and Azure Active Directory. I was able to follow all the steps here:
https://msdn.microsoft.com/en-us/library/
You need to add an "Application user" and assign a custom Security Role in CRM. See my answer in https://stackoverflow.com/a/48554845/3799784