Server to server authentication using Oauth2 and the Client credentials grant flow may be supported using these steps. Other flows may of course also be supported in a similar flow. User-authentication using Oauth2 and OpendId is described [[Openid] here]

1. Set up the call to obtain the "token" using the client secret, storing the result in transient classes as shown to the right

2. Set up a server-side view model to refresh the token before expiry, using criterias (as an example) as shown below.

2. Pass the "token" in all subsequent calls.

Please note that eventough Oauth2 is a standard, the naming conventions of all parameters may differ, these names worked using a Indentity Server 4