Solution was that indeed we needed 2 client_ids. We use one for mobile (the app id) and one for web (service id).