Yes, for sure. You'll need to write a Person Authentication interception script.
There are a bunch of examples here:
[https://github.com/GluuFederation/oxAuth/tree/master/Server/integrations](https://github.com/GluuFederation/oxAuth/tree/master/Server/integrations)
See docs here:
[https://gluu.org/docs/gluu-server/4.2/admin-guide/custom-script/](https://gluu.org/docs/gluu-server/4.2/admin-guide/custom-script/)