We've an application running inside Microsoft teams platform which needs to retrieve a token from Okta to access our backend APIs/resources. We're looking for simpler alternatives to (Implement authorization by grant type | Okta Developer), without introducing another enterprise app layer in Azure for SAML integration. Is it possible to have an application proxy (like Remote access to on-premises apps - Azure AD Application Proxy | Microsoft Docs) to drive the token transformation for all msft users trying to access our app based on custom filters (like tenant_id)?