@Dino-at-Google ♦♦ does having a microgateway on prem complicate this approach at all?What would be required in order to accommodate the microgateway with mutual TLS?Many thanks in advance

Thanks @Dino-at-Google ♦♦ That's very helpful!I did think my question was completely in line with what was originally asked by Amit Sharma..."As per the requirement, dotnet core backend api should also verifying the validity of the access token issue...

@Amit Sharma and @Kuldeep Bhati I'm also very interested in how the backend service can validate the token generated by Apigee. The scenario I'm interested in is if somebody has the URL to your API Target endpoint (could be an internal person), then ...