After spending a few hours working on this, we're no further ahead.
We can't even query vCO to read items under the /api path.
Any help on figuring out this SSO stuff within C# is appreciated. We're trying to call a workflow and pass parameters but can't even authenticate.
Thanks