OpenAM supports SAML 2.0 Bearer Assertion Profiles, for example to use an assertion to request an access token.