Security information in Authrorization Header should be extended to enable processing of OAuth2 tokens in Switchyard. At the moment only Basic/Digest authentication works.
In proposal extended support for Bearer added