I don't have enough 'reputation' yet to comment on answers, but just to clarify the accepted answer a bit - it seems that Blackboard requires you to send the client ID and secret (base64 encoded) to the endpoint when requesting a token. Like basic authentication: https://docs.anthology.com/docs/blackboard/rest-apis/getting-started/basic-authentication