In this case, the authentication error you are seeing is from the IDP(OKTA). You might check the failure of the IDP identities while authenticating the user.

As far as OAuth is concerned, using the OAuth token is a secure approach that allows you to control the privileges of the session created using the token. The SCOPE will help you do this.