Looping back to this in case others come across this in their dev efforts...
We use OAuth and are able to connect without issue. You'll find that PostMan is your friend in this effort...
In a nutshell, we created our integration here https://developer.webex.com/ and obtained the various keys needed in your app.
You'll also need to define the redirect URI and we've learned they are case sensitive.
You can only have 2 redirect URI's so we have one for DEV and one for Prod.
Set what permissions you want your app to have using the integration...
Now you have to code the app to have a way to "login" to webex using the URL provided in your app created above.
You'll need to add in elements from your IDP, we use ADFS so that was pretty straight forward.
Once you have that working, the login will provide a "code" with that, you can obtain an access token and refresh token.
The access and refresh token is unique to the user that generated to code, so you cannot share it with other accounts.
Once you have an access token, you can obtain a session ticket.
Now you have enough to authenticate... pass your user name and session ticket in your security context along with your site name.
I know this doesn't get into how to actually do this, but in a nutshell this is how it all works.
