We will need Oauth support to get user access token without having to provide the user name password or saml assertion from ADFS.

The trust would be the certificate trust.

Other implementations from other vendors -

https://tools.ietf.org/html/rfc7523

1. Google https://www.jhanley.com/google-cloud-creating-oauth-access-tokens-for-rest-api-calls/
   Refer to --

def createsignedjwt(pkey, pkeyid, email, scope): and
exchange that for the user access token in
def exchangeJwtForAccessToken(signedjwt):

Docusign https://developers.docusign.com/esign-rest-api/guides/authentication/oauth2-jsonwebtoken

1. Atlassian https://developer.atlassian.com/cloud/jira/software/oauth-2-jwt-bearer-token-authorization-grant-type/




2. Box https://developer.box.com/docs/construct-jwt-claim-manually#section-3-create-jwt-assertion




3. Saleforce - https://help.salesforce.com/articleView?id=remoteaccessoauthjwt_flow.htm&type=0