We have Portal built on top of dynamic CRM to provide authentication for the external user, now we are planning to move the identity to an external SSO solution (Okta), so we assessed the ability to integrate the authentication part by using Okta but we are not sure is it possible and what is the best protocol to use?