Currently AIM needs to start before PI DA so it can authenticate OIDC.
This functionality is currently in development, and will be shipped as part of AVEVA PI Server 2024 R2, expected in early Q4 2025.