In this article i will go over how to setup your ADFS 3.0 (available in Windows Server 2012 R2) server for OAUTH2 authentication. A couple of things to note: This setup will work for both standalone and farm deployments (including using the WID database). This is because Microsoft build an OAuth Authorization Code Lookup Protocol so that if one server generates the token you can claim it from another in the farm (when using standalone artifact store):  Make sure you have a basic ADFS configured, there are plenty of guides like this one:  ADFS 3.0 does not support secrets or token encryption/decryption for OAUTH2 While OAUTH2 is a standardized protocol i would not call Microsoft implementation a straight forward or standardized solution as there are some specifications. If you are using a self-singed certificate please make sure that: The Service Communications Certificate