Hi there, jap, that would probably work, if the oauth2 basic plugin would not directly route the unauthenticated request to the Idp-Portal 
Therefore the
https://mycommunity.example.net/latest.rss?api-key=xyz
leads me directly to login mask and the rss client spits out an error