Generate OAuth Token using SAML Assertion

[esync33]

In Apigee X, is it possible to implement the OAuth 2.0 SAML bearer assertion flow? Basically allowing you to request an OAuth access token using a SAML assertion. This will enable us to have all APIs use the OAuth security framework.

Also, in some cases, if possible, generating a SAML assertion for the backend once OAuth Validation is complete within the Proxy API.

[dchiesa1]

is it possible to implement the OAuth 2.0 SAML bearer assertion flow? Basically allowing you to request an OAuth access token using a SAML assertion.

Yes, surely. See this older question. And you may want to use something like this decoder within Apigee to base64-decode and maybe decompress the SAML Assertion before validating it.

in some cases, if possible, generating a SAML assertion for the backend once OAuth Validation is complete within the Proxy API.

and yes. You would use the GenerateSAMLAssertion policy to do that. The signature will be based on a private key that you configure within Apigee.