Okta plug-in

Register your Okta org once. You get an event hook, a token inline hook and a step-up endpoint. On every token Okta mints, the inline hook reads the subject's standing four-pillar verification and either stamps assurance claims or denies the token until the subject re-scans.