Delegated REST API authentication for a Jenkins user

I’m looking to be able to delegate a user’s access to the Jenkins REST API and run a job on their behalf via some sort of OAuth flow (like Azure AD). It seems like the only way to do this would be for a user to specify their own token and authenticate via basic auth, but I am not interested in using this approach as I would like the integration to be as seamless as possible. Are there any plugins or built-in functionality in Jenkins that could facilitate this?