> OAuth assumes that both client and service provider can reach identity provider. You could use client credentials flow with a certificate. Then all you need

> OAuth assumes that both client and service provider can reach identity provider. You could use client credentials flow with a certificate. Then all you need is to register the public key with the server, much like good old SSH.