Test/Document Okta integration

It's apparently enough different that our current generic SAML docs don't work. We should see if we can get a trial of Okta and document the exact configuration one each side that yields a working SAML integration.

cc/ @patricio