we have Okta as our single source of truth for authn/authz for a small HPC lab. we're trying to get SSSD set up to auth against it for logins, but Okta's LDAP interface intentionally has no uidNumber ...