Sorry to hijack the topic, but I’m in very similar situation, as I reported on this other post Integrate with legacy system, with a slight difference as we are also providing a web UI.
Can you provide additional information on how this token exchange can be performed? I’m stuck after signing-in on behalf of the user…