Gitlab API authentication with Google/et/al Provider


I am building an CLI application to help clients manage deployments. The application will need to pull repos and container images from Gitlab. Gitlab allows username/password authentication for simple CLI applications, which would be fine, but not MFA. If clients would like MFA, it will be significantly more complicated. My clients have accounts with Google / etc.

Is it possible to authenticate against the API with Google using OIDC/OAuth2 and generate an access token for subsequent operations.

I have searched and searched and not found anything particularly helpful.