I am unsure if Okta provides the functionality I am looking for so I will try to explain my problem briefly:

My company will provide an application which other companies can take part of. Other companies will have their own users within this application and are interested in shielding their users' data from users in other companies.

My company will have some top-level administrator tools and administrators in each company will be able to handle their own users (e.g. an admin can view users in their own company, but not in other companies).

Spring security was in the process of implementing ABAC themselves, but for some reason (see here https://github.com/spring-projects/spring-security/pull/4277) it never amounted to anything.

Would Okta be a possibility as an extra layer of abstraction on top of normal Spring Security RBAC to solve this problem?

Thanks in advance