A destination of type "OAuth SAML Bearer Assertion Authentication" (and others) support the destination property x_user_token.jwks or x_user_token.jwks_uri to validate an incoming JWT that is not created by UAA.
Is there any way to pass a self generated JWT to the external service using CAP?