We are currently using Okta for authentication purposes, and plan to use a directory server for authorization needs. However, in our endeavour to use Okta as a single point of contact for all SPs, we were trying out ways to see if Okta can: a) authenticate the user, and b) talk to the directory server to fetch roles and club the two together in a SAML token response.

We found no practical way to achieve the same. Is there any, by any chance?