Doesn't this presume that the third-party app supports OIDC? Which again makes it dependant on the vendors, not Okta.