<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D5WR00001ZUQjY0AXOkta Classic EngineAuthenticationAnswered2026-04-23T05:25:27.000Z2026-04-22T10:50:56.000Z2026-04-22T18:03:23.000Z
  • Hello @Arun KumarA.62811 (Customer)​ Thank you for posting on our Community page!

     

    At this time this is not possible to directly exchange an OIDC token for a SAML 2.0 assertion using a single API call or native token exchange in Okta. 

    You can also reach out via devforum.okta.com to check with our Developer team and see if there are other options for this request.

     

    Thank you for reaching out to our Community and have a great day!

    --

    Help others in the community by liking or hitting Select as Best if this response helped you.

    Expand Post
    • Hello @Arun KumarA.62811 (Customer)​ Is this the type of flow you are trying to achive:

      • Authenticate the user via OIDC to establish an Okta session.
      • Direct the user to the SAML 2.0 application using a Service Provider (SP) initiated flow or an Identity Provider (IdP) initiated flow.
      • Allow Okta to evaluate the active session and automatically generate a SAML 2.0 assertion.
      • Ensure the application receives the assertion from Okta to grant access, bypassing the need for a direct token-to-assertion exchange.

      Then yes this is possible.

      Expand Post

Loading
can we generate saml 2.0 form oidc token in okta