Okta confirmed a bizarre security flaw allowing access with 52+ character usernames, no password needed. Discovered on Oct. 30, resolved same day for affected product version Okta AD/LDAP DelAuth. Okta advises customers to check logs from July 23 to Oct.