Communication between app and service

I think it would just be a series of REST calls to get the token(s) you need.

There are also some OAuth2 packages on the asset store that might be helpful.

Whatever it is, if you run into issues, this approach may be useful:

Networking, UnityWebRequest, WWW, Postman, curl, WebAPI, etc:

And setting up a proxy can be very helpful too, in order to compare traffic: