Glad Segment is making good use of aws-vault and it's components! Did you consider whether adding okta support in aws-vault might have made sense? I've been thinking about doing that for a while, interested what made y'all decide to create a new one.
P.S. Any chance of a link back in the mention of aws-vault in the article? (aws-vault author here)