Hacker News Reader

But how long is such a password stuck in the system, e.g. if the downstream is unreachable.

Good question! If I remember correctly, the downstream system has only one chance to handle the HTTP request from Okta.