We just use google oauth which kicks you to okta. This lets us use the x/oauth/google packages from google itself.