Hackers stole access tokens from Okta's support unit
Oops. Here's an unpopular opinion: maybe critical gatekeeping with SSO using OAuth, SAML, and 2FA is something to run on-prem rather than pressing the SaaS "easy button".This includes not only Okta but Auth0 (Okta acquired), Authy, and Duo.