Application Server Configuration for Oauth2

Question

We are using a 3rd party tool (OpenAM) for our SSO solution. I have it working/integrated with ITShop. However it will not working for the application server. When I choose the method Oauth 2.0/OpenID Connection (Role Based) to login it uses a invalid client_id in the url. In designer, the value is set to "oneim" however the url it is passing contains "client_id=oneim/web.d1im.local/D1IMAppServer"! Where is this defined? Once I can use Oauth from the web interface, my follow on question will be how can I use a token to authenticate via the API? I assume it is still via D1IMAppServer/auth/apphost but what would the json string look like to authenticate via OAuth role based module with a code? If there is documentation that shows this please share the link as I could not find it.

Markus Weiss-Ehlers · Answer

In regards to OpenAM support please contact support as you might need some fixes for your version of OneIM. 
 In regards to token-based authentication against the REST API (if that is what you are up to), I think this is not supported. But maybe support has a better answer as well.