I’m building an app that will use OIDC to authenticate users, which will access our service using a browser. However, I also need to embed content from another service provider, which only supports SAML authentication. Therefore, our users will sign in and have a JWT, but will also need a SAML token to access this other content.
Can a JWT be used to get a SAML token silently (i.e., without requiring the user to login again)?