title: Azure AD On-Behalf-Of with oAuth & SAML
body: <p>We're using the <a href="https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-protocols-oauth-on-behalf-of" rel="nofollow noreferrer">Azure AD On-Behalf-Of flow</a> for connecting a user to several services through a single API gateway. Now we'd like to add another service (Nextcloud, synced through LDAP) which only supports SAML 2.0 and no oAuth2.</p>
  
  <p>Is it possible to somehow convert an oAuth-Token into a SAML-Token, maybe through an Azure AD API? Or is there some other way to connect this service I maybe haven't thought of?</p>