If you don't have SSO enabled on you OCM instance you will need to setup an Identity Cloud Service client application that will enable you to authenticate and receive an oAUTH2 token for requests against the OCM REST API. I've setup an example on the OCM-Social-Widget in github that shows