Django oauth2 toolkit provider, grant third application access

Question

A Django site acts as an oauth2 provider. A setup for an app tomcat_app looks like:

Whenever somebody tries to login into tomcat_app a user will