I have a passport-saml SSO working in NodeJS app. On successful authentication I receive a SAML response. Since I want Okta a generate a token without (again a browser login), can I use this SAML response generated to generate a JWT access token which I can further use to authorize access to resource/apis behind a custom authorizer. Or will I have to create a separate oauth flow where in I will have to pass the user creds to generate an JWT access token? Can you please guide on which flow is possible and some relevant example?

Thanks