Has anyone successfully used OATH with client credentials to allow a 3rd party to call JDE APIS?

We are trying to use OAUTH with client credentials. We are using Microsoft Azure for our OAUTH authentication. Our understanding is that we can use PRN, SUB, or UPN for the JD Edwards User Id,

For our integration partner Blue Yonder, it is mandatory to use OAUTH with client credentials. When Blue Yonder performs the token request, they do not get the PRN or UPN values in the token. They are only getting the SUB value. Unfortunately the SUB value coming from Microsoft Azure (automatically set by the application id) is 36 characters long. The problem is the JDE data item OPRID, which exists in the E1 Users PIM Information table F00927 is only 30 characters long.