Internal users need SSO from a custom OAUTH app
Adding SSO: CPQ as SP, custom Entra-authenticated Web App as IdP. Internal users only, however these users are also User Integration users SSO-ing from Salesforce.
Currently we have these SSO paths:
External users SSO via SAML and Federated Authentication where CPQ is the SP and IdP is a site called Impartner.
Internal users SSO from Salesforce via the Oracle CPQ managed package and employing the User Integration feature on the user page.
We need to add a 3rd path: a link from a custom app to CPQ that incidentally drops the user on a new or existing quote. This app uses OAUTH.