OpenAM as client works as an authentication module where authentication and authorization is handled by the authorization server, and on success an SSO session is created, so that OpenAM access management can happen as it normally does.