Authorization Server w/ SAML Application

Questions SAML
1

I am looking for a solution to authorize our enterprise users to access our APIs. The users are authenticated via a SAML based Application but there seems to be no way to associate policies for a SAML application to an Authorization Server in the console.

Our company is not ready to move to OIDC from SAML yet so I am looking for a way to authorize our users to access our APIs.

Thanks

2

In this instance, you can use the SAML Assertion grant flow (Implement authorization by grant type | Okta Developer). This will allow you to retain your existing SAML authentication, but create policies to utilize OAuth to protect your endpoints.