Will this approach work for Oauth 2.0 access policy as well? The above methods discussed are for shared access policy which our vendor is not willing to share as they prefer Oauth