vault login -method=okta username=arusso
Password (will be hidden):
Error authenticating: Error making API request.

URL: PUT https://vault.example.com:8200/v1/auth/okta/login/arusso
Code: 400. Errors:

* okta failure retrieving groups: HTTP Method: GET - URL: https://<org_name>.<base_url>/api/v1/users/SANITIZED/groups: - HTTP Status Code: 401, OKTA Error Code: E0000011, OKTA Error Summary: Invalid token provided, OKTA Error Causes:
[]

...
## PARAMETERS

    api_token (string)
        Okta API key.

    base_url (string)
        The base domain to use for the Okta API. When not specified in the configuration, "okta.com" is used.

    bypass_okta_mfa (bool)
        When set true, requests by Okta for a MFA check will be bypassed. This also disallows certain status checks on the account, such as whether the password is expired.

    max_ttl (duration (sec))
        Maximum duration after which authentication will be expired

    org_name (string)
        Name of the organization to be used in the Okta API.

    organization (string)
        (DEPRECATED) Okta organization to authenticate against. Use org_name instead.

    production (bool)
        (DEPRECATED) Use base_url.

    token (string)
        (DEPRECATED) Okta admin API token.  Use api_token instead.

    ttl (duration (sec))
        Duration after which authentication will be expired
...