I've got a requirement for an SAP integration to authenticate my identity governance app via a SAML assertion (currently just using basic auth). I wouldn't consider myself an authentication expert, but I'm pretty sure this is not a common pattern for API authn/authz. Here's the guidance from SAP:
I'm using AzureAD, and the only way I can think of to get that SAML token with all their requirements is by using ROPC, which I'm not fond of doing. Is there any other way around this?