Link in Security section of HREX IG depend on Bulk Data Exchange IG to  provide guidance on OAuth Server to Server Authentication, but link provided fails.  this is true across several versions, including build.  I suspect that in fact the link should point to the SMART App Launch IG, section 3, Backend Services.