Hi Daniel,
I think you are on the right track with API flow + OAuth. Whenever a new user with a specific role in Know Your Company is created you will use the Discourse API to also create/activate that user in The Watercooler which should allow them to use OAuth to login.