You're absolutely correct. Identity and SSO are hard and require a high degree of competency to do well, and they're massively impactful when they go wrong.

I think the problem is trust. So the question is, why would 1Password trust Okta?