Hey, this is Jam. First of all, it's worth pointing out that Oauth 2 is an authorization framework, not an authentication framework. You can read more about what Q2 says about it at the link below.

https://docs.q2developer.com/guides/frontend_development/sso.html?highlight=oauth#two-important-things-to-note

However, with that said, you could chain the SAML IDP to a separate authentication server that supports Oauth. For example, I have experimented using Q2 as a SAML IDP that authenticates into a KeyCloak server that then authenticates into an application using OpenID / Oauth 2.

Q2 --(SAML)--> KeyCloak --(OpenID)--> My Awesome App

https://www.keycloak.org/

• Jam Risser
• Nueve Solutions https://nuevesolutions.com