SAML 2.0 TO OAUTH

Question

I am using an IDP which supports Oauth and SAML BOTH

USER ---->SP--Oauth-->IDP--Oauth-->google(oauth2)

above flow is working fine where i am logging in to system from google.

now what want to achieve is

User ------>SP----oauth--->IDP---SAML--->Another IDP

now my question is ... Is that possible...? if yes please provide me some guide lines how to achieve that. how can i achieve same thing IDP Initiated flow. Thanks in advance

Answer 1

You can used other way around like below. It named SAML2Bearer assertion profile, You can found more details here[1].

User---->SP----SAML2Bearer--->IDP---Oauth--->Federated IDP

[1] http://xacmlinfo.org/2014/10/31/saml2-bearer-assertion-profile-for-oauth-2-0/