Basically speaking, you can't: Using comma separated value parameter strings in SQL IN clauses
] explains why.
It also explains how it is possible in SqlServer by passing the list of IDs as a string via a query parameter, and then converting that to a temporary table which the IN clause can then reference. But I have no idea how that function could work in Oracle - I don't use it. It might work. It might not!