Connect Okta
Create an OIDC web app in Okta, then connect it on Single Sign On. An account keeps one provider.
Create the app
In the Okta Admin Console, open Applications and choose Create App Integration. Pick OIDC as the sign-in method and Web Application as the type.
Name the app. Under Sign-in redirect URIs, paste the redirect URI from Single Sign On in Settings. Save.
Copy the credentials
On the app's General tab, copy the Client ID and the Client secret.
The issuer is the authorization server people sign in through. Open Security, then API, then Authorization Servers. The default server's issuer looks like https://your-domain.okta.com/oauth2/default. Copy that Issuer URI.
Assign people
Open the app's Assignments tab and assign the people or groups who should sign in to this account.
Connect it
In Settings, open Single Sign On, choose Okta, and paste the issuer, client ID, and client secret. Connect. Saving a different provider replaces Okta.