I don't have data on whether it is common, but I know a few OAuth vendors support it.