Set up the authorization server in the service provider.