1) get access token
$ curl
--request POST
--user "clientid:clientsecret"
--data "grant_type=password&username=user&password=welcome&scope=openid"
http://openam.mydomain.com:8080/openam/oauth2/access_token

2) get header token (to be used for authorization header while token
introspection in step 3)
$ curl
--request POST
--user "clientid:clientsecret"
--data "grant_type=client_credentials&scope=openid"
http://openam.mydomain.com:8080/openam/oauth2/access_token


3) introspect token
$ curl
--request POST
--header "Authorization: Basic ZGVtbzpjaGFuZ2VpdA=="
--data "token=f9063e26-3a29-41ec-86de-1d0d68aa85e9"
"https://openam.mydomain.com:8080/openam/oauth2/introspect"