The PowerServer Web APIs includes several built-in authentication servers which can be used handily to authenticate the installable cloud apps. Since the authentication server is built into the PowerServer Web APIs, it has the same root URL as the PowerServer Web APIs and it runs automatically when the PowerServer Web APIs runs. (Read more)
The following diagram shows the authentication and authorization process of the installable cloud app.