We have a requirement that the client uses AAD and Okta and wants to use OKTA to access the D365 APIs? Is this standard?
We are planning to create a App Registration and get the Client ID and use that key for accessing the API. We are using the AAD User ID and Password. Not sure where the OKTA would come into place?
We also need to have Silent login without the Challenge Response for AD cause these are business objects that will communicate with the API/
BO >> OKTA >> AD >> Azure Client ID >> D365 API
Does this seem right?