Enable OpenID Connect-based single-sign for applications proxied by NGINX Plus, using Okta as the identity provider (IdP).