FYI ADFS is now going the way of the dodo and being replaced by AAD which does what Okta and Auth0 do already.