Server to server authentication using Oauth2 and the "Client credentials grant" flow may be supported using these steps.

1. Set up the call to obtain the "token" using the client secret, storing the result in transient classes as shown to the right

[[File:TokenModel.PNG]|thumb|right]

2. Set up a server-side view model to refresh the token before exiry

2. Pass the "token" in all subsequent calls.