According to this article, Facebook and Microsoft Account ask the user for revealing user profile data to a web application:
I only want the user to authenticate. I do not want him/her to reveal anything to my web application. So, what is necessary in Web API code to opt-out from having the user agree to reveal his profile data?
app.UseMicrosoftAccountAuthentication ( clientId: "" , clientSecret: "" , ... ??? );