OAuth can be a good choice for that scenario and this article shows how it can be achieved in Python, with backendAn OAuth server issues time-based access tokens, which are simple strings, like web browser session cookies, confirming that such and suchIf a client system invokes the interoperability layer, the layer will obtain a token from the OAuth server and keep it in an internal cache.In OAuth terminology, what is described above has specific names, the overall flow of messages between Zato and the OAuth server isTo invoke REST services, fill out a form as below, pointing the 'Security' field to the newly created OAuth definition.Here is sample code to invoke a backend REST system - note that we merely refer to a connection by its name, without havingSimilarly to REST endpoints, to invoke HL7 FHIR servers, fill out a form as below and let the 'Security' field point to the OAuthHere is sample code to invoke a FHIR server system - as with REST servers above, observe that we only refer to a connection by its nameAll of these aspects can and will be independent in practice,Yet, once more, regardless of what makes the input data available, the backend OAuth mechanism will work independently of it all.