Just upvoting to emphasize that Okta, SSO and MDM services in general are an extremely major single point of failure. From the point of view of a non-expert in security, it would seem like segmenting the authentication services of companies should be a security requirement.