Guest IDP client
Mint an Exchange Token and drive a flow against the exchange.
Target app URL (resource)
Subject (sub)
Email (optional)
Browser flow
Bearer flow