an okta workflow makes sense as a hook point, though i'd have concerns about the legibility of that system