I have been administering things when I started my career. I would have loved to not sync passwords this way, but there is often no support for that, and okta

I have been administering things when I started my career. I would have loved to not sync passwords this way, but there is often no support for that, and okta is really not at fault here. SSO is an enterprise feature, if available at all. And most of the time we are left with some sort of password sync. It's horrible. And this is why I sympathize with okta here: what should they do? Not support shitty usecase X? Sure, enabling this should probably have a 24h cooldown and several safety nets. But I think this is not on okta in this case.