idp
audience
acr_values (okta)

Register https://example-app.com/client as a redirect URI for your OAuth client